The Brock Group suffered a data breach on July 21, 2021, caused by unauthorized access to employee email accounts. The incident exposed sensitive personal information, including names and Social Security numbers, affecting 2,451 individuals, among whom 11 were Maine residents notified on January 14, 2022. The compromised data posed a significant risk of identity theft, prompting the company to offer affected individuals identity theft protection services through IDX, which included credit monitoring and a $1 million reimbursement policy for potential losses. The breach stemmed from a targeted attack on employee credentials, highlighting vulnerabilities in email security protocols. While the company took remedial measures, the exposure of Social Security numbers—critical identifiers for financial and personal security—elevated the severity of the incident, particularly given the potential for long-term fraud and misuse of the stolen data.
TPRM report: https://www.rankiteo.com/company/brockgroup
"id": "bro023091825",
"linkid": "brockgroup",
"type": "Breach",
"date": "7/2021",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': '2,451 individuals (11 Maine '
'residents notified)',
'name': 'The Brock Group',
'type': 'Company'}],
'attack_vector': 'Unauthorized access to employee email accounts',
'customer_advisories': 'Identity theft protection services offered via IDX '
'(credit monitoring and $1 million reimbursement '
'policy)',
'data_breach': {'number_of_records_exposed': '2,451',
'personally_identifiable_information': ['Names',
'Social Security '
'numbers'],
'sensitivity_of_data': 'High (includes Social Security '
'numbers)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)']},
'date_detected': '2021-07-21',
'date_publicly_disclosed': '2022-01-14',
'description': 'The Maine Office of the Attorney General reported that The '
'Brock Group experienced a data breach on July 21, 2021, due '
'to unauthorized access to employee email accounts. The breach '
'impacted personal information, including names and Social '
'Security numbers, affecting a total of 2,451 individuals, '
'with 11 Maine residents notified on January 14, 2022. '
'Identity theft protection services were offered via IDX, '
'which includes credit monitoring and a $1 million '
'reimbursement policy.',
'impact': {'data_compromised': ['Names', 'Social Security numbers'],
'identity_theft_risk': 'High (PII exposed)',
'systems_affected': ['Employee email accounts']},
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
'Attorney General']},
'response': {'communication_strategy': 'Notification to affected individuals '
'(Maine residents notified on '
'2022-01-14)',
'third_party_assistance': ['IDX (identity theft protection '
'services)']},
'title': 'The Brock Group Data Breach (2021)',
'type': 'Data Breach'}