AppleCare Insurance Services, Inc.

On January 1, 2014, AppleCare Insurance Services, Inc. suffered a data breach due to the theft of a licensed insurance agent’s laptop. The incident exposed sensitive personal information of individuals, including names, dates of birth, Social Security numbers, and addresses. While no financial data was compromised, the breach posed a significant risk of identity theft and fraud for the affected individuals. The breach was formally reported to the California Office of the Attorney General on February 28, 2014. The stolen device contained unencrypted data, heightening the vulnerability of the exposed records. The breach underscored the importance of securing portable devices containing personally identifiable information (PII) and implementing robust encryption protocols to mitigate risks associated with physical theft.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-44302

TPRM report: https://www.rankiteo.com/company/applecare-medical-management

"id": "app019090625",
"linkid": "applecare-medical-management",
"type": "Breach",
"date": "1/2014",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Insurance',
                        'location': 'California, USA',
                        'name': 'AppleCare Insurance Services, Inc.',
                        'type': 'Insurance Provider'}],
 'attack_vector': 'Theft of Laptop',
 'data_breach': {'data_exfiltration': 'Yes (via stolen laptop)',
                 'personally_identifiable_information': ['Names',
                                                         'Dates of Birth',
                                                         'Social Security '
                                                         'Numbers',
                                                         'Addresses'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2014-01-01',
 'date_publicly_disclosed': '2014-02-28',
 'description': 'The California Office of the Attorney General reported that '
                'AppleCare Insurance Services, Inc. experienced a data breach '
                'on January 1, 2014, involving the theft of a laptop belonging '
                'to a licensed insurance agent. The breach potentially '
                'compromised personal information of individuals, including '
                'names, dates of birth, Social Security numbers, and '
                'addresses, although no financial information was involved.',
 'impact': {'data_compromised': ['Names',
                                 'Dates of Birth',
                                 'Social Security Numbers',
                                 'Addresses'],
            'identity_theft_risk': 'High (PII exposed)',
            'payment_information_risk': 'None',
            'systems_affected': ['Laptop']},
 'initial_access_broker': {'entry_point': 'Physical theft of laptop'},
 'post_incident_analysis': {'root_causes': 'Lack of physical security for '
                                           'sensitive data (unencrypted '
                                           'laptop)'},
 'references': [{'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Reported to California '
                                                       'Office of the Attorney '
                                                       'General'},
 'response': {'communication_strategy': 'Public disclosure via California '
                                        'Office of the Attorney General'},
 'title': 'AppleCare Insurance Services, Inc. Data Breach (2014)',
 'type': 'Data Breach (Physical Theft)'}