CLEAResult

The Vermont Office of the Attorney General reported a data breach involving CLEAResult Consulting on August 23, 2023. The breach, linked to the MOVEit Transfer application, potentially affected personal information of an unknown number of individuals, including names, addresses, phone numbers, email, financial accounts, and social security numbers. The incident occurred on or about May 30, 2023, when unauthorized access allowed an actor to transfer files from the MOVEit system.

Source: https://ago.vermont.gov/document/2023-08-23-clearesult-consulting-progress-software-moveit-data-breach-notice-consumers

TPRM report: https://scoringcyber.rankiteo.com/company/clearesult-consulting-inc.

"id": "cle254072825",
"linkid": "clearesult-consulting-inc.",
"type": "Breach",
"date": "5/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'name': 'CLEAResult Consulting', 'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'addresses',
                                              'phone numbers',
                                              'email',
                                              'financial accounts',
                                              'social security numbers']},
 'date_detected': '2023-05-30',
 'date_publicly_disclosed': '2023-08-23',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving CLEAResult Consulting on August 23, 2023. '
                'The breach, linked to the MOVEit Transfer application, '
                'potentially affected personal information of an unknown '
                'number of individuals, including names, addresses, phone '
                'numbers, email, financial accounts, and social security '
                'numbers. The incident occurred on or about May 30, 2023, when '
                'unauthorized access allowed an actor to transfer files from '
                'the MOVEit system.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'phone numbers',
                                 'email',
                                 'financial accounts',
                                 'social security numbers'],
            'systems_affected': ['MOVEit Transfer application']},
 'initial_access_broker': {'entry_point': 'MOVEit Transfer application'},
 'references': [{'date_accessed': '2023-08-23',
                 'source': 'Vermont Office of the Attorney General'}],
 'title': 'Data Breach at CLEAResult Consulting',
 'type': 'Data Breach',
 'vulnerability_exploited': 'MOVEit Transfer application'}