Aya Healthcare, Inc.

The Maine Office of the Attorney General reported a data breach involving Aya Healthcare, Inc. on February 27, 2025. The breach occurred on January 12 and 19, 2025, and affected 3,187 individuals, including four residents of Maine. The compromised information included personal data such as names, Social Security numbers, and addresses, accessed by an automated bot using credentials obtained from unrelated sources.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a72866d9-e2b1-49f3-bca6-3fbef2dce6e2.html

TPRM report: https://www.rankiteo.com/company/ayahealthcare

"id": "aya818080425",
"linkid": "ayahealthcare",
"type": "Breach",
"date": "1/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 3187,
                        'industry': 'Healthcare',
                        'name': 'Aya Healthcare, Inc.',
                        'type': 'Healthcare'}],
 'attack_vector': 'Automated Bot',
 'data_breach': {'number_of_records_exposed': 3187,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers',
                                              'Addresses']},
 'date_detected': '2025-02-27',
 'date_publicly_disclosed': '2025-02-27',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Aya Healthcare, Inc. on February 27, 2025. '
                'The breach occurred on January 12 and 19, 2025, and affected '
                '3,187 individuals, including four residents of Maine. The '
                'compromised information included personal data such as names, '
                'Social Security numbers, and addresses, accessed by an '
                'automated bot using credentials obtained from unrelated '
                'sources.',
 'impact': {'data_compromised': ['Names',
                                 'Social Security numbers',
                                 'Addresses']},
 'initial_access_broker': {'entry_point': 'Compromised Credentials'},
 'motivation': 'Unknown',
 'references': [{'date_accessed': '2025-02-27',
                 'source': 'Maine Office of the Attorney General'}],
 'threat_actor': 'Unknown',
 'title': 'Data Breach at Aya Healthcare, Inc.',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Compromised Credentials'}