Consumer Reports

The Maine Office of the Attorney General reported a data breach involving Consumer Reports on September 28, 2023, which occurred on May 29, 2023. The incident involved unauthorized access to Pension Benefit Information, LLC’s MOVEit Transfer software, affecting 560 individuals, including social security numbers that were compromised. Notification letters to affected individuals were expected to be provided starting August 18, 2023.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/912a299d-4fcc-4ab7-b85d-7d41a86bcfa6.shtml

TPRM report: https://www.rankiteo.com/company/consumer-reports

"id": "con328072825",
"linkid": "consumer-reports",
"type": "Breach",
"date": "5/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 560,
                        'industry': 'Consumer Services',
                        'name': 'Consumer Reports',
                        'type': 'Organization'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 560,
                 'personally_identifiable_information': 'Social Security '
                                                        'Numbers',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Social Security Numbers'},
 'date_detected': '2023-09-28',
 'date_publicly_disclosed': '2023-09-28',
 'description': 'Unauthorized access to Pension Benefit Information, LLC’s '
                'MOVEit Transfer software, compromising social security '
                'numbers of 560 individuals.',
 'impact': {'data_compromised': ['Social Security Numbers'],
            'systems_affected': ['MOVEit Transfer software']},
 'references': [{'date_accessed': '2023-09-28',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'communication_strategy': 'Notification letters to affected '
                                        'individuals expected to be provided '
                                        'starting August 18, 2023'},
 'title': 'Data Breach at Consumer Reports',
 'type': 'Data Breach',
 'vulnerability_exploited': 'MOVEit Transfer software'}