City of Philadelphia

The Maine Office of the Attorney General reported a data breach incident involving the City of Philadelphia on June 11, 2021. The breach, discovered on May 18, 2021, was due to a phishing attack that led to unauthorized access to employee email accounts, potentially affecting four Maine residents. Compromised information included names, Social Security numbers, and driver's license/state ID numbers.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e359b601-9934-4db0-9993-f259a182e0df.shtml

TPRM report: https://scoringcyber.rankiteo.com/company/city-of-philadelphia

"id": "cit359072625",
"linkid": "city-of-philadelphia",
"type": "Breach",
"date": "3/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Public Administration',
                        'location': 'Philadelphia, PA',
                        'name': 'City of Philadelphia',
                        'type': 'Government'}],
 'attack_vector': 'Phishing',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers',
                                              "Driver's license/state ID "
                                              'numbers']},
 'date_detected': '2021-05-18',
 'date_publicly_disclosed': '2021-06-11',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach incident involving the City of Philadelphia on June '
                '11, 2021. The breach, discovered on May 18, 2021, was due to '
                'a phishing attack that led to unauthorized access to employee '
                'email accounts, potentially affecting four Maine residents. '
                'Compromised information included names, Social Security '
                "numbers, and driver's license/state ID numbers.",
 'impact': {'data_compromised': ['Names',
                                 'Social Security numbers',
                                 "Driver's license/state ID numbers"]},
 'initial_access_broker': {'entry_point': 'Phishing Email'},
 'post_incident_analysis': {'root_causes': 'Phishing attack leading to '
                                           'unauthorized access'},
 'references': [{'date_accessed': '2021-06-11',
                 'source': 'Maine Office of the Attorney General'}],
 'title': 'Data Breach at City of Philadelphia',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Human Error'}