Science Systems and Applications, Inc.

The Maine Office of the Attorney General disclosed that Science Systems and Applications, Inc. (SSAI) suffered a data breach between January 1 and January 3, 2024, due to unauthorized access to its systems. The incident exposed sensitive personal information of 1,051 individuals, including 3 Maine residents, with compromised data consisting of names and Social Security numbers (SSNs) a high-risk category for identity theft. SSAI responded by notifying affected parties on February 9, 2024, and offered 12 months of free identity theft protection services via Experian to mitigate potential fraud risks. The breach highlights vulnerabilities in SSAI’s cybersecurity defenses, particularly in safeguarding personally identifiable information (PII), which could lead to long-term financial and reputational harm for the impacted individuals. While the scale of the breach was relatively contained, the nature of the exposed data (SSNs) elevates the severity due to its potential for misuse in fraudulent activities, such as loan applications, tax fraud, or unauthorized account openings.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/65b82434-9643-4f45-b452-204aaf248098.shtml

TPRM report: https://www.rankiteo.com/company/adnet-systems-inc-

"id": "adn039091825",
"linkid": "adnet-systems-inc-",
"type": "Breach",
"date": "1/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '1,051 individuals (including 3 '
                                              'Maine residents)',
                        'name': 'Science Systems and Applications, Inc. (SSAI)',
                        'type': 'Organization'}],
 'customer_advisories': 'Notification sent to affected individuals on February '
                        '9, 2024, with offer of 12 months of identity theft '
                        'protection via Experian',
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': '1,051',
                 'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High (includes Social Security '
                                        'numbers)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_publicly_disclosed': '2024-02-09',
 'description': 'The Maine Office of the Attorney General reported that '
                'Science Systems and Applications, Inc. (SSAI) experienced a '
                'data breach due to unauthorized access to its systems from '
                'January 1, 2024, to January 3, 2024. Approximately 1,051 '
                'individuals were affected, including 3 Maine residents, and '
                'the compromised data included names and Social Security '
                'numbers. SSAI notified the affected individuals and offered '
                'identity theft protection services through Experian for 12 '
                'months on February 9, 2024.',
 'impact': {'data_compromised': ['Names', 'Social Security numbers'],
            'identity_theft_risk': 'High (Social Security numbers '
                                   'compromised)'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Notification to affected individuals; '
                                        'offer of 12 months of identity theft '
                                        'protection',
              'third_party_assistance': 'Experian (identity theft protection '
                                        'services)'},
 'title': 'Data Breach at Science Systems and Applications, Inc. (SSAI)',
 'type': 'Data Breach'}