City of Albuquerque

A stack of documents containing the personal information, including the social security numbers of the hundreds of taxpayers of Albuquerque city was found lying in an Albuquerque dumpster.

Albuquerque tax preparation business employee who carelessly dumped the documents with sensitive information was questioned by the media.

Source: https://www.koat.com/article/documents-with-social-security-numbers-found-in-albuquerque-dumpster/5069547

TPRM report: https://scoringcyber.rankiteo.com/company/city-of-albuquerque

"id": "cit1147522",
"linkid": "city-of-albuquerque",
"type": "Breach",
"date": "01/2016",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Hundreds of taxpayers',
                        'industry': 'Finance',
                        'location': 'Albuquerque',
                        'name': 'Albuquerque Tax Preparation Business',
                        'type': 'Business'}],
 'attack_vector': 'Physical Theft',
 'data_breach': {'number_of_records_exposed': 'Hundreds',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security Numbers',
                                              'Personal Information']},
 'description': 'A stack of documents containing the personal information, '
                'including the social security numbers of hundreds of '
                'taxpayers of Albuquerque city, was found lying in an '
                'Albuquerque dumpster. An Albuquerque tax preparation business '
                'employee who carelessly dumped the documents with sensitive '
                'information was questioned by the media.',
 'impact': {'data_compromised': ['Social Security Numbers',
                                 'Personal Information'],
            'identity_theft_risk': 'High'},
 'lessons_learned': 'Proper disposal of sensitive information is crucial to '
                    'prevent data breaches.',
 'motivation': 'Negligence',
 'post_incident_analysis': {'corrective_actions': 'Improve data disposal '
                                                  'policies and employee '
                                                  'training',
                            'root_causes': 'Negligence in the disposal of '
                                           'sensitive documents'},
 'recommendations': 'Implement strict policies for the disposal of sensitive '
                    'information and conduct regular training for employees on '
                    'data protection practices.',
 'threat_actor': 'Employee',
 'title': 'Unsecured Disposal of Sensitive Taxpayer Information',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Improper Disposal of Sensitive Information'}