Centerstone Insurance and Financial Services

The California Office of the Attorney General reported a data breach involving Centerstone Insurance and Financial Services d/b/a BenefitMall on January 3, 2019. The breach, discovered on October 11, 2018, involved an email phishing attack that exposed employee email login credentials, potentially affecting personal information including names, addresses, Social Security numbers, bank account numbers, and dates of birth.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-143493

TPRM report: https://www.rankiteo.com/company/benefitmall

"id": "ben200072925",
"linkid": "benefitmall",
"type": "Breach",
"date": "6/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Finance',
                        'name': 'Centerstone Insurance and Financial Services '
                                'd/b/a BenefitMall',
                        'type': 'Insurance and Financial Services'}],
 'attack_vector': 'Phishing',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'addresses',
                                              'Social Security numbers',
                                              'bank account numbers',
                                              'dates of birth']},
 'date_detected': '2018-10-11',
 'date_publicly_disclosed': '2019-01-03',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving Centerstone Insurance and Financial Services '
                'd/b/a BenefitMall on January 3, 2019. The breach, discovered '
                'on October 11, 2018, involved an email phishing attack that '
                'exposed employee email login credentials, potentially '
                'affecting personal information including names, addresses, '
                'Social Security numbers, bank account numbers, and dates of '
                'birth.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'Social Security numbers',
                                 'bank account numbers',
                                 'dates of birth']},
 'initial_access_broker': {'entry_point': 'Email phishing'},
 'post_incident_analysis': {'root_causes': 'Email phishing attack'},
 'references': [{'date_accessed': '2019-01-03',
                 'source': 'California Office of the Attorney General'}],
 'title': 'Data Breach at Centerstone Insurance and Financial Services d/b/a '
          'BenefitMall',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Email login credentials'}