The Maine Office of the Attorney General disclosed that Kiefer Aquatics suffered a **data breach** due to **external system hacking** on **March 9, 2023**, though the incident was initially detected on **July 21, 2022**. The breach impacted **30 Maine residents** and a total of **17,045 individuals**, with **credit and debit card information** potentially compromised. The exposure of financial data poses risks of fraudulent transactions, identity theft, and reputational harm to both the company and affected customers. While the breach did not involve ransomware or a full-scale operational disruption, the compromise of payment card details aligns with financial and reputational consequences, particularly given the scale of affected individuals. The delayed discovery (nearly **8 months**) further exacerbates concerns about the company’s cybersecurity posture and response protocols.
TPRM report: https://www.rankiteo.com/company/adolph-kiefer-&-associates
"id": "ado958091725",
"linkid": "adolph-kiefer-&-associates",
"type": "Cyber Attack",
"date": "2/2022",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"
{'affected_entities': [{'customers_affected': 17045,
'name': 'Kiefer Aquatics',
'type': 'Company'},
{'customers_affected': 30,
'location': 'Maine, USA',
'name': 'Maine Residents',
'type': 'Individuals'}],
'attack_vector': 'External System Hacking',
'data_breach': {'number_of_records_exposed': 17045,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Payment Card Data']},
'date_detected': '2022-07-21',
'date_publicly_disclosed': '2023-03-09',
'description': 'The Maine Office of the Attorney General reported that Kiefer '
'Aquatics experienced a data breach involving external system '
'hacking. The breach potentially compromised credit and debit '
'card information of 17,045 individuals, including 30 Maine '
'residents.',
'impact': {'data_compromised': ['Credit Card Information',
'Debit Card Information'],
'identity_theft_risk': 'Potential',
'payment_information_risk': 'High'},
'references': [{'date_accessed': '2023-03-09',
'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
'Attorney General']},
'title': 'Kiefer Aquatics Data Breach',
'type': 'Data Breach'}