Breckenridge Insurance Services, Inc.

The Maine Office of the Attorney General disclosed a data breach at Breckenridge Insurance Services (BIS), detected on July 5, 2022, but originating from unauthorized access on May 26, 2022. The incident compromised personal data of 311 individuals, including 87 Maine residents, exposing sensitive information such as names, dates of birth, and driver’s license numbers details highly susceptible to identity theft and fraud. In response, BIS offered 24 months of identity theft protection services via IDX to affected parties. The breach highlights vulnerabilities in safeguarding personally identifiable information (PII), raising concerns over potential long-term financial and reputational harm to victims. While no explicit financial losses or ransomware involvement were reported, the exposure of government-issued identifiers (driver’s license numbers) elevates the risk of fraudulent activities, including loan applications, account takeovers, or synthetic identity theft. The delayed discovery (over a month after initial access) further underscores gaps in breach detection mechanisms, potentially exacerbating the impact on trust and regulatory compliance.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a4ba81b6-1958-46eb-8d52-29a44a4381cf.shtml

TPRM report: https://www.rankiteo.com/company/breckenridge-insurance

"id": "bre038090625",
"linkid": "breckenridge-insurance",
"type": "Breach",
"date": "5/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '311 (including 87 Maine '
                                              'residents)',
                        'industry': 'Insurance',
                        'name': 'Breckenridge Insurance Services (BIS)',
                        'type': 'Company'}],
 'customer_advisories': 'Identity theft protection services offered for 24 '
                        'months through IDX',
 'data_breach': {'number_of_records_exposed': '311',
                 'personally_identifiable_information': ['names',
                                                         'dates of birth',
                                                         "driver's license "
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2022-07-05',
 'date_publicly_disclosed': '2023-03-31',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach incident involving Breckenridge Insurance Services '
                '(BIS). The breach was discovered on July 5, 2022, and '
                'involved unauthorized access starting on May 26, 2022, '
                'affecting 311 individuals in total, including 87 Maine '
                'residents. Compromised information included names, dates of '
                "birth, and driver's license numbers, with identity theft "
                'protection services offered for 24 months through IDX.',
 'impact': {'data_compromised': ['names',
                                 'dates of birth',
                                 "driver's license numbers"],
            'identity_theft_risk': 'High (identity theft protection services '
                                   'offered for 24 months)'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'third_party_assistance': 'IDX (identity theft protection '
                                        'services)'},
 'title': 'Breckenridge Insurance Services (BIS) Data Breach',
 'type': 'Data Breach'}