Aperio Group client account data was breached.
It occurred when two employees’ email accounts were compromised by successful phishing attacks that resulted in auto-forwarding emails from those accounts to two external accounts.
The investigation determined that all emails sent to those two accounts had been blind copied/forwarded to the two external addresses.
The compromised data included account names, account numbers, email addresses, and account balances.
Social security numbers and clients’ login credentials were reportedly not compromised.
"id": "APE11237622",
"linkid": "aperio",
"type": "Breach",
"date": "02/2018",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"