Bergen's Promise, Inc.

The Maine Office of the Attorney General reported a data breach involving Bergen's Promise, Inc. on June 23, 2022. The breach occurred between November 15 and November 18, 2021, due to unauthorized access to six employee email accounts, potentially affecting 7,513 individuals, with their Social Security Numbers among the compromised information. Identity theft protection services for 12 months were offered to those affected.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/05b4a9be-268e-47c5-9753-3354efb00bc8.shtml

TPRM report: https://www.rankiteo.com/company/bergenspromise

"id": "ber234072925",
"linkid": "bergenspromise",
"type": "Breach",
"date": "11/2021",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 7513,
                        'industry': 'Health and Human Services',
                        'location': 'New Jersey',
                        'name': "Bergen's Promise, Inc.",
                        'type': 'Non-profit Organization'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 7513,
                 'personally_identifiable_information': 'Social Security '
                                                        'Numbers',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security Numbers']},
 'date_detected': '2022-06-23',
 'date_publicly_disclosed': '2022-06-23',
 'description': 'Unauthorized access to six employee email accounts, '
                'potentially affecting 7,513 individuals, with their Social '
                'Security Numbers among the compromised information.',
 'impact': {'data_compromised': ['Social Security Numbers'],
            'identity_theft_risk': 'High'},
 'initial_access_broker': {'entry_point': 'Email Accounts'},
 'references': [{'date_accessed': '2022-06-23',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'remediation_measures': ['Identity theft protection services for '
                                       '12 months']},
 'title': "Data Breach at Bergen's Promise, Inc.",
 'type': 'Data Breach',
 'vulnerability_exploited': 'Email Accounts'}