On May 1, 2020, ADRA International suffered a data breach due to the hacking of an external system, as reported by the Maine Office of the Attorney General on October 1, 2020. The incident exposed sensitive financial account numbers, potentially impacting 1,737 individuals, including 9 residents of Maryland. The breach involved unauthorized access to personal and financial data, raising concerns over identity theft, fraud, and financial losses for the affected parties. While the exact method of the hack remains undisclosed, the compromise of financial records suggests a targeted cyber intrusion aimed at exploiting vulnerable external systems. The delayed disclosure (five months after the breach) further highlights potential gaps in incident response and notification protocols. The exposed data could enable fraudulent transactions, phishing attacks, or other malicious activities, emphasizing the severity of the security failure.
TPRM report: https://www.rankiteo.com/company/adra-international
"id": "adr021091825",
"linkid": "adra-international",
"type": "Breach",
"date": "5/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 1737,
'industry': 'Humanitarian Aid / Development',
'name': 'ADRA International',
'type': 'Non-profit Organization'}],
'attack_vector': 'Hacking of an external system',
'data_breach': {'data_exfiltration': 'likely',
'number_of_records_exposed': 1737,
'sensitivity_of_data': 'high',
'type_of_data_compromised': ['financial account numbers']},
'date_detected': '2020-10-01',
'date_publicly_disclosed': '2020-10-01',
'description': 'On October 1, 2020, the Maine Office of the Attorney General '
'reported that ADRA International experienced a data breach '
'involving the hacking of an external system. The breach, '
'which occurred on May 1, 2020, potentially affected 1,737 '
'individuals, including 9 residents of Maryland, and '
'compromised financial account numbers.',
'impact': {'data_compromised': ['financial account numbers'],
'identity_theft_risk': 'potential (due to financial account '
'numbers)',
'payment_information_risk': 'high (financial account numbers '
'compromised)',
'systems_affected': ['external system']},
'references': [{'date_accessed': '2020-10-01',
'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
'Attorney General']},
'response': {'communication_strategy': 'Reported to the Maine Office of the '
'Attorney General'},
'title': 'ADRA International Data Breach (2020)',
'type': 'Data Breach'}