River Valley Farms LLC

On August 12, 2019, and August 26, 2019, River Valley Farms LLC suffered a data breach initiated by a former employee who sent unauthorized emails. The incident exposed sensitive personal and financial information of employees, including names, addresses, Social Security numbers, dates of birth, and financial account details. The exact number of affected individuals remains undetermined, raising concerns about potential identity theft, financial fraud, or misuse of the compromised data. The breach highlights internal vulnerabilities, particularly regarding access controls and monitoring of former employees' activities. Given the nature of the exposed data such as Social Security numbers and financial records the risk of long-term harm to affected employees is significant, potentially leading to reputational damage for the company and legal repercussions under data protection regulations.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-184207

TPRM report: https://www.rankiteo.com/company/conrad-&-adams-fruit-llc

"id": "con935082125",
"linkid": "conrad-&-adams-fruit-llc",
"type": "Breach",
"date": "8/2019",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Agriculture/Farming',
                        'location': 'California, USA',
                        'name': 'River Valley Farms LLC',
                        'type': 'Private Company'}],
 'attack_vector': 'Unauthorized Email Transmission',
 'data_breach': {'data_exfiltration': 'Yes (via unauthorized emails)',
                 'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': ['Names',
                                                         'Addresses',
                                                         'Social Security '
                                                         'numbers',
                                                         'Dates of birth'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Financial Data']},
 'date_publicly_disclosed': '2019-11-08',
 'description': 'The California Office of the Attorney General reported that '
                'River Valley Farms LLC experienced a data breach involving '
                'unauthorized emails sent by a former employee on August 12, '
                '2019, and August 26, 2019. The breach potentially compromised '
                'employee names, addresses, Social Security numbers, dates of '
                'birth, and financial account information for an unknown '
                'number of individuals.',
 'impact': {'data_compromised': ['Employee names',
                                 'Addresses',
                                 'Social Security numbers',
                                 'Dates of birth',
                                 'Financial account information'],
            'identity_theft_risk': 'High (PII and financial data exposed)',
            'payment_information_risk': 'High (financial account information '
                                        'exposed)'},
 'post_incident_analysis': {'root_causes': 'Insider threat (former employee '
                                           'with unauthorized access to '
                                           'sensitive data)'},
 'references': [{'date_accessed': '2019-11-08',
                 'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Reported to California '
                                                       'Office of the Attorney '
                                                       'General'},
 'response': {'communication_strategy': 'Public disclosure via California '
                                        'Office of the Attorney General'},
 'threat_actor': 'Former Employee',
 'title': 'River Valley Farms LLC Data Breach via Unauthorized Emails by '
          'Former Employee',
 'type': 'Data Breach (Insider Threat)'}