Cantella & Co., Inc.

The California Office of the Attorney General reported a data breach involving Cantella & Co., Inc. on November 10, 2020. The breach occurred on August 25, 2020, and involved malware that infected email threads, potentially exposing personal information such as names, addresses, and social security numbers for an unknown number of individuals. The incident highlights the vulnerability of email systems to malware attacks and the potential for significant data exposure, underscoring the need for robust cybersecurity measures to protect sensitive information.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-195984

TPRM report: https://www.rankiteo.com/company/cantella

"id": "can858072625",
"linkid": "cantella",
"type": "Breach",
"date": "8/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'name': 'Cantella & Co., Inc.', 'type': 'Company'}],
 'attack_vector': 'Malware',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'addresses',
                                              'social security numbers']},
 'date_detected': '2020-08-25',
 'date_publicly_disclosed': '2020-11-10',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving Cantella & Co., Inc. on November 10, 2020. '
                'The breach occurred on August 25, 2020, and involved malware '
                'that infected email threads, potentially exposing personal '
                'information such as names, addresses, and social security '
                'numbers for an unknown number of individuals.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'social security numbers']},
 'references': [{'date_accessed': '2020-11-10',
                 'source': 'California Office of the Attorney General'}],
 'title': 'Data Breach at Cantella & Co., Inc.',
 'type': 'Data Breach'}