Audience Rewards, LLC

On July 10, 2022, Audience Rewards suffered a ransomware cyberattack that resulted in a data breach, officially reported by the Washington State Office of the Attorney General on August 11, 2022. The incident compromised the personal information of 545 individuals, exposing sensitive data such as full names, dates of birth, email addresses, passwords, and security question answers. The breach stemmed from a malicious ransomware attack, which encrypted critical systems and exfiltrated customer data. While the exact financial or operational repercussions were not detailed, the exposure of authentication credentials (passwords and security answers) poses a high risk of follow-on attacks, including identity theft, phishing, and account takeovers. The breach underscores vulnerabilities in Audience Rewards’ cybersecurity defenses, particularly against ransomware-driven data exfiltration. The company likely faced reputational damage, potential regulatory scrutiny, and the need for remediation measures, such as notifying affected individuals, offering credit monitoring, and strengthening security protocols. The incident highlights the growing threat of ransomware groups targeting customer databases for financial gain or further exploitation.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=13662

TPRM report: https://www.rankiteo.com/company/augeo.

"id": "aug353083025",
"linkid": "augeo.",
"type": "Ransomware",
"date": "7/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'customers_affected': 545,
                        'name': 'Audience Rewards',
                        'type': 'company'}],
 'data_breach': {'number_of_records_exposed': 545,
                 'personally_identifiable_information': ['name',
                                                         'full date of birth',
                                                         'email address',
                                                         'password/security '
                                                         'question answers'],
                 'sensitivity_of_data': 'high',
                 'type_of_data_compromised': ['personal identifiable '
                                              'information (PII)']},
 'date_detected': '2022-07-10',
 'date_publicly_disclosed': '2022-08-11',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach involving Audience Rewards on August 11, 2022. '
                'The breach occurred on July 10, 2022, due to a ransomware '
                'cyberattack affecting 545 individuals, with compromised '
                'information potentially including name, full date of birth, '
                'email address, and password/security question answers.',
 'impact': {'data_compromised': ['name',
                                 'full date of birth',
                                 'email address',
                                 'password/security question answers'],
            'identity_theft_risk': 'high'},
 'references': [{'source': 'Washington State Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Washington State '
                                                        'Office of the '
                                                        'Attorney General']},
 'title': 'Audience Rewards Data Breach (2022)',
 'type': ['data breach', 'ransomware']}