Cannon Design suffered a data breach between January 19, 2023, and January 25, 2023, where unauthorized actors gained access to its network. The incident exposed sensitive personal information of 18 Maine residents, including names, addresses, Social Security numbers, and driver’s license numbers. The compromised data poses a significant risk of identity theft, financial fraud, or other malicious exploitation. Affected individuals were formally notified via written notice on August 19, 2024, nearly 19 months after the breach, raising concerns about delayed response and potential prolonged exposure of the stolen data. The breach underscores vulnerabilities in Cannon Design’s cybersecurity defenses, particularly in safeguarding personally identifiable information (PII) from external intrusions.
TPRM report: https://www.rankiteo.com/company/cannon-
"id": "can804082025",
"linkid": "cannon-",
"type": "Breach",
"date": "1/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 18,
'industry': 'Architecture/Engineering',
'location': 'Global (affecting 18 Maine residents)',
'name': 'Cannon Design',
'type': 'Organization'}],
'customer_advisories': 'Written notice sent to affected individuals '
'(2024-08-19)',
'data_breach': {'data_exfiltration': 'Likely (unauthorized access confirmed)',
'number_of_records_exposed': 18,
'personally_identifiable_information': ['names',
'addresses',
'Social Security '
'numbers',
"driver's license "
'numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)']},
'date_detected': '2023-01-25',
'description': "The Maine Attorney General's Office reported that Cannon "
'Design experienced a data breach involving unauthorized '
'access to their network between January 19, 2023, and January '
'25, 2023. The breach potentially affected 18 Maine residents, '
'with compromised information including names, addresses, '
"Social Security numbers, and driver's license numbers.",
'impact': {'data_compromised': ['names',
'addresses',
'Social Security numbers',
"driver's license numbers"],
'identity_theft_risk': 'High (PII exposed)'},
'references': [{'source': "Maine Attorney General's Office"}],
'regulatory_compliance': {'regulatory_notifications': 'Maine Attorney '
"General's Office"},
'response': {'communication_strategy': 'Written notice to affected '
'individuals (sent on 2024-08-19)'},
'title': 'Cannon Design Data Breach (January 2023)',
'type': 'Data Breach'}