BINA Farm Inc.

On October 31, 2024, the Vermont Office of the Attorney General reported a data breach involving BINA Farm Inc. that occurred on February 28, 2024. The unauthorized access was through an employee’s email account, potentially exposing personal information such as names, social security numbers, and medical information; however, the number of affected individuals is unknown.

Source: https://ago.vermont.gov/document/2024-10-31-bina-farm-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/binafarm

"id": "bin459072725",
"linkid": "binafarm",
"type": "Breach",
"date": "2/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'name': 'BINA Farm Inc.', 'type': 'Company'}],
 'attack_vector': 'Email Compromise',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security Numbers',
                                              'Medical Information']},
 'date_detected': '2024-10-31',
 'date_publicly_disclosed': '2024-10-31',
 'description': 'Unauthorized access through an employee’s email account, '
                'potentially exposing personal information such as names, '
                'social security numbers, and medical information.',
 'impact': {'data_compromised': ['Names',
                                 'Social Security Numbers',
                                 'Medical Information']},
 'initial_access_broker': {'entry_point': 'Employee Email Account'},
 'references': [{'date_accessed': '2024-10-31',
                 'source': 'Vermont Office of the Attorney General'}],
 'title': 'Data Breach at BINA Farm Inc.',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Employee Email Account'}