Bridge Senior Living, LLC

The Maine Office of the Attorney General disclosed that Bridge Senior Living, LLC suffered a prolonged data breach where unauthorized actors gained access to employee email accounts between April 14, 2020, and October 8, 2020. The incident exposed sensitive personal and financial data of 1,263 individuals, including 28 Maine residents, with compromised information such as names and financial account numbers. The breach was detected significantly later, on July 21, 2021, and affected individuals were formally notified via written correspondence on March 10, 2022. The delayed discovery and notification period heightened risks of fraud, identity theft, or financial exploitation for the victims. The breach underscored vulnerabilities in email security protocols, potentially eroding trust among residents, employees, and stakeholders in the senior living provider’s ability to safeguard confidential data.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/34862d2c-248e-4816-b20b-ea6bb0723089.shtml

TPRM report: https://www.rankiteo.com/company/bridge-senior-living

"id": "bri1003091725",
"linkid": "bridge-senior-living",
"type": "Breach",
"date": "4/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 1263,
                        'industry': 'Senior Living / Healthcare',
                        'location': 'United States (including Maine)',
                        'name': 'Bridge Senior Living, LLC',
                        'type': 'Private Company'}],
 'attack_vector': 'Email Account Compromise',
 'customer_advisories': 'Written notification sent to affected individuals '
                        '(2022-03-10)',
 'data_breach': {'data_exfiltration': 'Likely (unauthorized access to email '
                                      'accounts)',
                 'number_of_records_exposed': 1263,
                 'personally_identifiable_information': ['Names',
                                                         'Financial Account '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Financial Data']},
 'date_detected': '2021-07-21',
 'date_publicly_disclosed': '2022-03-10',
 'description': 'The Maine Office of the Attorney General reported that Bridge '
                'Senior Living, LLC experienced a data breach involving '
                'unauthorized access to email accounts from April 14, 2020, to '
                'October 8, 2020. A total of 1,263 individuals were '
                'potentially affected, including 28 Maine residents, with '
                'compromised information including names and financial account '
                'numbers.',
 'impact': {'data_compromised': ['Names', 'Financial Account Numbers'],
            'identity_theft_risk': 'Potential (due to exposed PII and '
                                   'financial data)',
            'payment_information_risk': 'High (financial account numbers '
                                        'compromised)',
            'systems_affected': ['Email Accounts']},
 'initial_access_broker': {'entry_point': 'Email Accounts'},
 'investigation_status': 'Disclosed (2022-03-10)',
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'communication_strategy': 'Written notification to affected '
                                        'individuals (March 10, 2022)'},
 'title': 'Bridge Senior Living, LLC Data Breach (2020)',
 'type': 'Data Breach (Unauthorized Access)'}