Brittany Ferries

A technical glitch in the routing website maintenance of Brittany Ferries left some of the customer's accounts potentially exposed to anyone who knew the link resulting in a data breach incident.

The ferry company notified its customers of a fault in the authentication process used for My Account login details which exposed the information of 25,000 customers like the person's name, postal address, telephone number, booking references for the past six months, passport number, date of birth and nationality.

However, its engineers and security team worked immediately to diagnose and resolve the issue on the same day it was discovered.

Source: https://www.theregister.com/2021/11/10/brittany_ferries/

TPRM report: https://scoringcyber.rankiteo.com/company/brittany-ferries

"id": "bri11131522",
"linkid": "brittany-ferries",
"type": "Breach",
"date": "11/2021",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 25000,
                        'industry': 'Transportation',
                        'name': 'Brittany Ferries',
                        'type': 'Ferry Company'}],
 'attack_vector': 'Fault in the authentication process',
 'data_breach': {'number_of_records_exposed': 25000,
                 'personally_identifiable_information': ['Name',
                                                         'Postal address',
                                                         'Telephone number',
                                                         'Passport number',
                                                         'Date of birth',
                                                         'Nationality'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information',
                                              'Booking Information']},
 'description': 'A technical glitch in the routing website maintenance of '
                "Brittany Ferries left some of the customer's accounts "
                'potentially exposed to anyone who knew the link resulting in '
                'a data breach incident.',
 'impact': {'data_compromised': ["Person's name",
                                 'Postal address',
                                 'Telephone number',
                                 'Booking references for the past six months',
                                 'Passport number',
                                 'Date of birth',
                                 'Nationality']},
 'response': {'communication_strategy': ['Notified its customers'],
              'remediation_measures': ['Engineers and security team diagnosed '
                                       'and resolved the issue on the same day '
                                       'it was discovered']},
 'title': 'Brittany Ferries Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Authentication process for My Account login '
                            'details'}