Capital Lumber Company

Capital Lumber Company experienced a data breach between July 27 and September 6, 2020, where unauthorized actors gained access to sensitive personal information. The incident compromised Social Security Numbers (SSNs) of 2,723 individuals, including at least one Maine resident. Following the breach, the company offered identity theft protection services to affected parties as a remedial measure. The breach was formally reported by the Maine Office of the Attorney General on December 18, 2020. The exposure of SSNs poses a significant risk of identity theft, financial fraud, and long-term reputational harm to the impacted individuals. While the breach did not involve ransomware or a broader systemic attack, the compromise of highly sensitive personally identifiable information (PII) particularly SSNs elevates the severity due to the potential for misuse in fraudulent activities. The company’s response included mitigation efforts, but the incident underscores vulnerabilities in data protection protocols that allowed unauthorized access over an extended period (nearly six weeks).

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8315f831-622e-4176-90a3-98c3c46db70f.shtml

TPRM report: https://www.rankiteo.com/company/capital-lumber

"id": "cap039091825",
"linkid": "capital-lumber",
"type": "Breach",
"date": "7/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 2723,
                        'industry': 'Lumber/Building Materials',
                        'location': 'Maine, USA',
                        'name': 'Capital Lumber Company',
                        'type': 'Private Company'}],
 'customer_advisories': 'Identity theft protection services offered to '
                        'affected individuals',
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': 2723,
                 'personally_identifiable_information': 'Yes (SSNs)',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security Numbers']},
 'date_publicly_disclosed': '2020-12-18',
 'description': 'The Maine Office of the Attorney General reported that '
                'Capital Lumber Company experienced a data breach involving '
                'unauthorized access to personal information between July 27 '
                'and September 6, 2020. The breach affected 2,723 individuals, '
                'including one Maine resident, and involved the compromise of '
                'Social Security Numbers. Identity theft protection services '
                'were offered following the breach.',
 'impact': {'data_compromised': ['Social Security Numbers'],
            'identity_theft_risk': 'High (SSNs compromised)'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'recovery_measures': 'Identity theft protection services offered '
                                   'to affected individuals'},
 'title': 'Capital Lumber Company Data Breach (2020)',
 'type': 'Data Breach'}