CompSource Mutual Insurance Company

CompSource Mutual Insurance Company suffered a data breach between July 16–19, 2022, where unauthorized actors gained access to its systems, exposing sensitive personal information of 3,928 individuals. The compromised data included Social Security numbers, among other confidential details. The breach was severe enough to warrant proactive measures, including written notifications sent to affected residents starting October 28, 2022, alongside 12 months of free identity theft protection services via Equifax. The incident highlights significant risks to individuals’ financial and personal security, as exposed Social Security numbers are prime targets for identity theft, fraud, and long-term exploitation. The company’s response suggests the breach had tangible consequences, though the exact method of unauthorized access (e.g., phishing, system vulnerability) was not disclosed. The scale and nature of the exposed data indicate a substantial operational and reputational impact, particularly given the sensitivity of the compromised records.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bdcc2a70-d023-4d98-a28d-88eb12703f68.shtml

TPRM report: https://www.rankiteo.com/company/compsourcemutual

"id": "com1010090725",
"linkid": "compsourcemutual",
"type": "Breach",
"date": "7/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 3928,
                        'industry': 'Insurance',
                        'name': 'CompSource Mutual Insurance Company',
                        'type': 'Insurance Company'}],
 'customer_advisories': 'Written notification with offer of 12 months of '
                        'identity theft protection via Equifax',
 'data_breach': {'data_exfiltration': 'Potential (unauthorized access '
                                      'confirmed)',
                 'number_of_records_exposed': 3928,
                 'personally_identifiable_information': 'Yes (Social Security '
                                                        'numbers)',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security numbers',
                                              'other sensitive information']},
 'date_detected': '2022-07-19',
 'date_publicly_disclosed': '2022-10-28',
 'description': 'The Maine Office of the Attorney General reported that '
                'CompSource Mutual Insurance Company experienced a data breach '
                'between July 16, 2022, and July 19, 2022, affecting 3,928 '
                'individuals. Unauthorized access occurred, potentially '
                'compromising Social Security numbers and other sensitive '
                'information. Affected residents were notified on October 28, '
                '2022, and offered 12 months of identity theft protection '
                'services through Equifax.',
 'impact': {'brand_reputation_impact': 'Potential negative impact due to '
                                       'exposure of sensitive data',
            'data_compromised': ['Social Security numbers',
                                 'other sensitive information'],
            'identity_theft_risk': 'High (Social Security numbers '
                                   'compromised)'},
 'investigation_status': 'Completed (notifications sent)',
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Written notification to affected '
                                        'individuals',
              'third_party_assistance': 'Equifax (identity theft protection '
                                        'services)'},
 'title': 'CompSource Mutual Insurance Company Data Breach (July 2022)',
 'type': 'Data Breach'}