Traffic Solutions Corporation

On April 14, 2021, Statewide Safety Systems (operating under Traffic Solutions Corporation) suffered a ransomware attack that led to a significant data breach, reported by the California Office of the Attorney General on November 16, 2021. The incident compromised personal and sensitive information of employees and beneficiaries, including names, contact details, government-issued IDs (such as driver’s licenses or passports), financial account numbers, and medical records. The breach exposed highly confidential data, posing severe risks of identity theft, financial fraud, and unauthorized access to medical histories. Given the nature of the stolen information particularly financial and medical records the attack had profound implications for both the company’s workforce and its operational integrity. The involvement of ransomware further escalated the severity, as such attacks often combine data exfiltration with encryption-based extortion, increasing the potential for long-term reputational and financial damage. The breach underscored vulnerabilities in the company’s cybersecurity defenses, raising concerns about compliance with data protection regulations and the safeguarding of sensitive employee information.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-547609

TPRM report: https://www.rankiteo.com/company/all-traffic-solutions

"id": "all1033090725",
"linkid": "all-traffic-solutions",
"type": "Ransomware",
"date": "4/2021",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Traffic Safety / Government Contracting',
                        'location': 'California, USA',
                        'name': 'Traffic Solutions Corporation (dba Statewide '
                                'Safety Systems)',
                        'type': 'Private Company'}],
 'data_breach': {'data_encryption': 'Likely (ransomware attack)',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Protected Health Information '
                                              '(PHI)',
                                              'Financial Data']},
 'date_publicly_disclosed': '2021-11-16',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving Traffic Solutions Corporation, doing '
                'business as Statewide Safety Systems. The breach was a '
                'ransomware attack that potentially compromised personal '
                'information such as names, contact information, '
                'government-issued IDs, financial account numbers, and medical '
                'information of employees and beneficiaries.',
 'impact': {'data_compromised': ['Names',
                                 'Contact Information',
                                 'Government-Issued IDs',
                                 'Financial Account Numbers',
                                 'Medical Information'],
            'identity_theft_risk': 'High (PII and financial data exposed)',
            'payment_information_risk': 'High (financial account numbers '
                                        'exposed)'},
 'ransomware': {'data_encryption': True},
 'references': [{'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulations_violated': ['California Consumer '
                                                    'Privacy Act (CCPA)',
                                                    'Potentially Health '
                                                    'Insurance Portability and '
                                                    'Accountability Act '
                                                    '(HIPAA) if medical data '
                                                    'was exposed'],
                           'regulatory_notifications': 'California Office of '
                                                       'the Attorney General'},
 'response': {'communication_strategy': 'Public disclosure via California '
                                        "Attorney General's office"},
 'title': 'Data Breach at Traffic Solutions Corporation (Statewide Safety '
          'Systems) Due to Ransomware Attack',
 'type': 'Data Breach, Ransomware Attack'}