Big M Transportation, Inc.

On June 1, 2022, the Maine Office of the Attorney General disclosed a data breach affecting Big M Transportation, Inc., which occurred on March 18, 2022, due to external hacking. The incident resulted in the compromise of Social Security numbers (SSNs) belonging to three Maine residents. The breach was attributed to an unauthorized external intrusion, likely involving cybercriminals exploiting vulnerabilities or deploying hacking techniques to access sensitive employee data. While the scale of the breach appears limited to a small number of individuals, the exposure of SSNs a highly sensitive form of personally identifiable information (PII) poses significant risks, including identity theft, financial fraud, and long-term reputational harm to the affected individuals. In response, Big M Transportation is providing 12 months of free identity theft protection services through Experian IdentityWorks to mitigate potential damages. However, the breach underscores vulnerabilities in the company’s cybersecurity defenses, particularly concerning employee data protection. The incident did not involve ransomware or broader systemic disruptions but highlights the persistent threat of targeted cyber attacks aimed at stealing critical personal information for malicious purposes.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f3a42c91-d07e-427c-bbf5-6341eae7d018.shtml

TPRM report: https://www.rankiteo.com/company/bigmtransport

"id": "big646090125",
"linkid": "bigmtransport",
"type": "Breach",
"date": "3/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': '3',
                        'industry': 'Transportation',
                        'location': 'Maine, USA',
                        'name': 'Big M Transportation, Inc.',
                        'type': 'Private Company'}],
 'attack_vector': 'External Hacking',
 'customer_advisories': ['12 months of identity theft protection services '
                         'through Experian IdentityWorks'],
 'data_breach': {'number_of_records_exposed': '3',
                 'personally_identifiable_information': 'Yes (Social Security '
                                                        'numbers)',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security numbers']},
 'date_detected': '2022-03-18',
 'date_publicly_disclosed': '2022-06-01',
 'description': 'On June 1, 2022, the Maine Office of the Attorney General '
                'reported a data breach involving Big M Transportation, Inc. '
                'that occurred on March 18, 2022, due to external hacking. The '
                'breach affected the Social Security numbers of 3 Maine '
                'residents, and the company is offering 12 months of identity '
                'theft protection services through Experian IdentityWorks.',
 'impact': {'data_compromised': ['Social Security numbers'],
            'identity_theft_risk': 'High (Social Security numbers exposed)'},
 'references': [{'date_accessed': '2022-06-01',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'third_party_assistance': ['Experian IdentityWorks (identity '
                                         'theft protection services)']},
 'title': 'Data Breach at Big M Transportation, Inc.',
 'type': 'Data Breach'}