Comprehensive Auto Resource Company, Inc.

The Maine Office of the Attorney General disclosed that Comprehensive Auto Resource Company, Inc. (CARco) suffered a data breach between March 20 and March 23, 2023, due to unauthorized access to its computer systems. The incident exposed sensitive personal and financial data of approximately 240 individuals, including names and financial account numbers, heightening the risk of identity theft and fraud. Affected parties, including at least one Maine resident, were formally notified on November 29, 2023, nearly eight months after the breach. As a remedial measure, CARco offered 12 months of identity theft protection services to impacted individuals. The delay in disclosure and the nature of the compromised data financial account details suggest a significant risk of financial fraud and reputational harm to both the company and the affected individuals.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2759dab6-bb79-41ac-ad86-81bc690fb2da.shtml

TPRM report: https://www.rankiteo.com/company/comsearch-inc.

"id": "com257091825",
"linkid": "comsearch-inc.",
"type": "Breach",
"date": "3/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '240',
                        'name': 'Comprehensive Auto Resource Company, Inc. '
                                '(CARco)',
                        'type': 'Company'}],
 'customer_advisories': 'Identity theft protection services offered for 12 '
                        'months to affected individuals',
 'data_breach': {'number_of_records_exposed': '240',
                 'personally_identifiable_information': ['names',
                                                         'financial account '
                                                         'numbers'],
                 'sensitivity_of_data': 'high',
                 'type_of_data_compromised': ['personally identifiable '
                                              'information (PII)',
                                              'financial data']},
 'date_publicly_disclosed': '2023-11-29',
 'description': 'The Maine Office of the Attorney General reported that '
                'Comprehensive Auto Resource Company, Inc. (CARco) experienced '
                'a data breach involving unauthorized access to its computer '
                'systems between March 20 and March 23, 2023. The breach '
                'affected approximately 240 individuals, with sensitive '
                'information, including names and financial account numbers, '
                'potentially compromised. Written notice of this incident was '
                'provided to one Maine resident on November 29, 2023, and '
                'identity theft protection services were offered for 12 '
                'months.',
 'impact': {'data_compromised': ['names', 'financial account numbers'],
            'identity_theft_risk': 'high (identity theft protection services '
                                   'offered for 12 months)',
            'payment_information_risk': 'high (financial account numbers '
                                        'compromised)',
            'systems_affected': ['computer systems']},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Written notice provided to affected '
                                        'individuals (e.g., one Maine resident '
                                        'notified on November 29, 2023)'},
 'title': 'Data Breach at Comprehensive Auto Resource Company, Inc. (CARco)',
 'type': 'Data Breach'}