Accruent, LLC suffered a data breach due to external hacking, granting unauthorized access to sensitive personal information over a prolonged period from January 25, 2023, to November 6, 2023. The incident impacted 2,513 individuals, including three Maine residents, exposing critical data such as Social Security numbers and financial account details. The breach posed significant risks of identity theft and financial fraud, prompting the company to offer 24 months of free credit monitoring and identity restoration services to affected parties. The prolonged duration of the breach increased the potential for exploitation of the compromised data, heightening concerns over long-term security and trust implications for the company and its clients.
TPRM report: https://www.rankiteo.com/company/accruent
"id": "acc042090625",
"linkid": "accruent",
"type": "Breach",
"date": "1/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"
{'affected_entities': [{'customers_affected': 2513,
'name': 'Accruent, LLC',
'type': 'Private Company'}],
'attack_vector': 'External Hacking',
'customer_advisories': 'Free 24-month credit monitoring and identity '
'restoration services offered',
'data_breach': {'data_exfiltration': 'Likely (unauthorized access confirmed)',
'number_of_records_exposed': 2513,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security numbers',
'financial account details']},
'date_resolved': '2023-11-06',
'description': 'The Maine Office of the Attorney General reported that '
'Accruent, LLC experienced a data breach involving external '
'hacking that allowed unauthorized access to personal '
'information from January 25, 2023, until November 6, 2023. '
'The breach affected 2,513 individuals, including 3 residents '
'from Maine, with potential compromise of Social Security '
'numbers and financial account details. Free 24-month credit '
'monitoring and identity restoration services were offered to '
'those affected.',
'impact': {'data_compromised': ['Social Security numbers',
'financial account details'],
'identity_theft_risk': 'High (SSNs and financial data exposed)',
'payment_information_risk': 'High'},
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
'Attorney General'},
'response': {'recovery_measures': 'Free 24-month credit monitoring and '
'identity restoration services offered to '
'affected individuals'},
'title': 'Accruent, LLC Data Breach (2023)',
'type': 'Data Breach'}