On December 9, 2022, Broadband Access Services (BAS) experienced a data breach due to unauthorized access (hacking) into its cloud hosting provider. The incident compromised the personal information of 328 individuals, including two Maine residents, exposing sensitive data such as names, Social Security numbers, and financial account numbers. BAS responded by offering one year of identity theft protection services through Equifax to affected individuals. The breach was publicly disclosed on March 9, 2023, by the Maine Office of the Attorney General. The exposed data particularly financial and personally identifiable information (PII) poses significant risks, including identity theft, financial fraud, and long-term reputational harm for the company. The attack targeted a third-party cloud provider, highlighting vulnerabilities in supply-chain security.
TPRM report: https://www.rankiteo.com/company/bas2000
"id": "bas016090625",
"linkid": "bas2000",
"type": "Breach",
"date": "12/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 328,
'name': 'Broadband Access Services (BAS)',
'type': 'Organization'},
{'customers_affected': 2,
'industry': 'Legal/Regulatory',
'location': 'Maine, USA',
'name': 'Maine Office of the Attorney General',
'type': 'Government'}],
'attack_vector': 'Unauthorized Access (Hacking)',
'customer_advisories': ['One year of identity theft protection services '
'offered via Equifax'],
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': 328,
'personally_identifiable_information': ['Name',
'Social Security '
'Number',
'Financial Account '
'Number'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Financial Data']},
'date_detected': '2022-12-09',
'date_publicly_disclosed': '2023-03-09',
'description': 'On March 9, 2023, the Maine Office of the Attorney General '
'reported a data breach involving Broadband Access Services '
'(BAS), which occurred on December 9, 2022. The breach was due '
"to unauthorized access (hacking) to BAS's cloud hosting "
'provider, affecting 328 individuals in total, including the '
'personal information of two Maine residents, such as their '
'name, Social Security number, and financial account number. '
'BAS offered one year of identity theft protection services '
'through Equifax as a response measure.',
'impact': {'data_compromised': ['Name',
'Social Security Number',
'Financial Account Number'],
'identity_theft_risk': 'High (PII exposed)',
'payment_information_risk': 'High (Financial account numbers '
'exposed)',
'systems_affected': ['Cloud Hosting Provider']},
'initial_access_broker': {'entry_point': 'Cloud Hosting Provider'},
'references': [{'date_accessed': '2023-03-09',
'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
'Attorney General']},
'response': {'third_party_assistance': ['Equifax (Identity Theft Protection '
'Services)']},
'title': 'Broadband Access Services (BAS) Data Breach via Cloud Hosting '
'Provider',
'type': 'Data Breach'}