Altman, Rogers & Co.

On February 16, 2023, Altman, Rogers & Co. experienced a data breach due to unauthorized network access (hacking), exposing sensitive personal and financial information of 2,321 individuals, including 2 Maine residents. The compromised data included names, Social Security numbers, and financial account details, heightening the risk of identity theft and fraud. In response, the company offered 12 months of identity theft protection services to affected individuals. The breach was formally reported by the Maine Attorney General’s Office on April 6, 2023, indicating a delayed disclosure. The exposure of highly sensitive financial and identification data poses severe long-term risks, including potential financial fraud, credit damage, and reputational harm to both the company and the impacted individuals.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/49703e09-833a-4505-832f-8fbb19df946f.shtml

TPRM report: https://www.rankiteo.com/company/altman-rogers-&-co

"id": "alt040091825",
"linkid": "altman-rogers-&-co",
"type": "Breach",
"date": "2/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': '2,321 (including 2 Maine '
                                              'residents)',
                        'industry': 'Financial Services / Accounting',
                        'name': 'Altman, Rogers & Co.',
                        'type': 'Company (Accounting/Financial Services)'}],
 'attack_vector': 'Unauthorized Access (Hacking)',
 'customer_advisories': 'Identity theft protection services (12 months) '
                        'offered',
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': '2,321',
                 'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Financial Data']},
 'date_detected': '2023-02-16',
 'date_publicly_disclosed': '2023-04-06',
 'description': "The Maine Attorney General's Office reported a data breach "
                'involving Altman, Rogers & Co. due to unauthorized access '
                "(hacking) to the company's network. The breach affected 2,321 "
                'individuals, including 2 Maine residents. Compromised data '
                'includes names, Social Security numbers, and financial '
                'account information. Identity theft protection services (12 '
                'months) were offered to affected individuals.',
 'impact': {'data_compromised': ['Names',
                                 'Social Security Numbers',
                                 'Financial Account Information'],
            'identity_theft_risk': 'High (PII and financial data exposed)',
            'payment_information_risk': 'Yes (Financial account information '
                                        'compromised)'},
 'references': [{'date_accessed': '2023-04-06',
                 'source': "Maine Attorney General's Office"}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Attorney '
                                                       "General's Office"},
 'response': {'communication_strategy': 'Public disclosure via Maine Attorney '
                                        "General's Office",
              'recovery_measures': 'Identity theft protection services (12 '
                                   'months) offered to affected individuals'},
 'title': 'Data Breach at Altman, Rogers & Co.',
 'type': 'Data Breach'}