The Maine Attorney General's Office disclosed a data breach at American Welding & Gas, Inc. (AWG) in October 2021. The incident stemmed from unauthorized access to a single employee’s email account between July 22, 2021, and July 28, 2021, exposing sensitive personal data. The compromised information included the names and Social Security numbers (SSNs) of three Maine residents, though the full scope of the breach remains limited to this group. AWG responded by notifying the affected individuals and offering 12 months of complimentary credit monitoring via Experian to mitigate potential risks like identity theft or financial fraud. The breach highlights vulnerabilities in email security protocols, particularly regarding phishing or credential compromise, which allowed threat actors to infiltrate a corporate account. While the impact was contained to a small number of individuals, the exposure of SSNs critical identifiers for financial and governmental transactions poses long-term risks for those affected. The company’s proactive measures aim to restore trust, but the incident underscores the persistent threat of targeted cyber intrusions in industries handling sensitive employee or customer data.
TPRM report: https://www.rankiteo.com/company/american-welding-&-gas
"id": "ame043091825",
"linkid": "american-welding-&-gas",
"type": "Breach",
"date": "7/2021",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': '3 (Maine residents)',
'industry': 'Industrial Gas & Welding Supplies',
'location': 'United States (Maine residents affected)',
'name': 'American Welding & Gas, Inc. (AWG)',
'type': 'Private Company'}],
'attack_vector': 'Compromised Email Account',
'customer_advisories': 'Notification Sent to Affected Individuals',
'data_breach': {'data_exfiltration': 'Potential (Unauthorized Access to '
'Email)',
'number_of_records_exposed': '3',
'personally_identifiable_information': ['Names',
'Social Security '
'Numbers'],
'sensitivity_of_data': 'High (SSNs)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)']},
'date_detected': '2021-07-28',
'date_publicly_disclosed': '2021-10-21',
'description': "The Maine Attorney General's Office reported a data breach "
'involving American Welding & Gas, Inc. (AWG) on October 21, '
'2021. The breach involved unauthorized access to one employee '
'email account from July 22, 2021, to July 28, 2021, '
'potentially exposing the names and Social Security numbers of '
'three Maine residents. AWG notified affected individuals and '
'is providing 12 months of credit monitoring services through '
'Experian.',
'impact': {'brand_reputation_impact': 'Potential (Notified Individuals, '
'Credit Monitoring Offered)',
'data_compromised': ['Names', 'Social Security Numbers'],
'identity_theft_risk': 'High (SSNs Exposed)',
'systems_affected': ['Employee Email Account']},
'initial_access_broker': {'entry_point': 'Employee Email Account'},
'investigation_status': 'Disclosed (No Further Details)',
'post_incident_analysis': {'corrective_actions': ['Credit Monitoring for '
'Affected Individuals']},
'references': [{'date_accessed': '2021-10-21',
'source': "Maine Attorney General's Office"}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Attorney '
"General's Office"]},
'response': {'communication_strategy': 'Notification to Affected Individuals',
'incident_response_plan_activated': 'Likely (Notification & '
'Credit Monitoring '
'Implemented)',
'third_party_assistance': ['Experian (Credit Monitoring)']},
'title': 'American Welding & Gas, Inc. (AWG) Data Breach (2021)',
'type': 'Data Breach (Unauthorized Email Access)'}