Black, Gould & Associates, Inc. (“BGA”) suffered a data breach incident after it discovered that consumer information stored on its computer system was compromised after an unauthorized party gained access to the BGA network.
The leaked information includes the information of about 42,568 people including first and last names, Social Security numbers, dates of birth, and addresses of those who purchased an insurance policy sold by a broker or agent associated with BGA.
BGA launched an investigation with the assistance of third-party digital forensics specialists and sent out data breach letters to all affected parties
Source: https://www.jdsupra.com/legalnews/black-gould-associates-inc-notifies-4485640/
TPRM report: https://scoringcyber.rankiteo.com/company/black-gould-&-associates
"id": "bla165291222",
"linkid": "black-gould-&-associates",
"type": "Breach",
"date": "12/2022",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 42568,
'industry': 'Insurance',
'name': 'Black, Gould & Associates, Inc.',
'type': 'Company'}],
'attack_vector': 'Unauthorized Access',
'customer_advisories': 'Data Breach Letters',
'data_breach': {'number_of_records_exposed': 42568,
'personally_identifiable_information': ['first and last names',
'Social Security '
'numbers',
'dates of birth',
'addresses'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information']},
'description': 'Black, Gould & Associates, Inc. (BGA) suffered a data breach '
'incident after an unauthorized party gained access to its '
'network, compromising consumer information.',
'impact': {'data_compromised': ['first and last names',
'Social Security numbers',
'dates of birth',
'addresses']},
'investigation_status': 'Investigation Launched',
'response': {'communication_strategy': 'Data Breach Letters',
'third_party_assistance': 'Digital Forensics Specialists'},
'threat_actor': 'Unauthorized Party',
'title': 'Black, Gould & Associates, Inc. Data Breach',
'type': 'Data Breach'}