Cross Catholic Outreach, Inc. suffered a data breach discovered on April 23, 2024, involving an external system compromise. The incident exposed HR records of 546 individuals, including 1 Maine resident, with sensitive data such as names, Social Security numbers, and financial account details potentially accessed. The breach posed a significant risk of identity theft, financial fraud, and reputational harm due to the exposure of highly confidential employee information. Notifications to affected individuals were issued on June 3, 2024, indicating a delay in public disclosure. The nature of the exposed data particularly Social Security numbers and financial records heightens the severity, as such details are prime targets for cybercriminals engaging in fraud or further malicious activities. The breach underscores vulnerabilities in the organization’s external systems, raising concerns about data protection protocols and third-party security measures.
TPRM report: https://www.rankiteo.com/company/congregation-of-holy-cross-us-province-inc
"id": "con946082125",
"linkid": "congregation-of-holy-cross-us-province-inc",
"type": "Breach",
"date": "4/2024",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': '546 (including 1 Maine '
'resident)',
'industry': 'Religious/Charitable',
'name': 'Cross Catholic Outreach, Inc.',
'type': 'Non-profit Organization'}],
'customer_advisories': 'Notifications sent to 546 affected individuals (June '
'3, 2024)',
'data_breach': {'file_types_exposed': ['HR records'],
'number_of_records_exposed': '546',
'personally_identifiable_information': ['Names',
'Social Security '
'numbers',
'Financial account '
'details'],
'sensitivity_of_data': 'High (SSNs, financial account '
'details)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Financial Data']},
'date_detected': '2024-04-23',
'date_publicly_disclosed': '2024-06-03',
'description': 'The Maine Office of the Attorney General reported that Cross '
'Catholic Outreach, Inc. experienced a data breach where an '
'external system was breached, discovered on April 23, 2024. '
'The breach involved the potential exposure of HR records '
'containing sensitive information such as names, Social '
'Security numbers, and financial account details. '
'Notifications were sent out on June 3, 2024, affecting 546 '
'individuals in total, including 1 resident of Maine.',
'impact': {'data_compromised': ['HR records (names, Social Security numbers, '
'financial account details)'],
'identity_theft_risk': 'High (SSNs and financial details exposed)',
'payment_information_risk': 'High (financial account details '
'exposed)',
'systems_affected': ['External system']},
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
'Attorney General']},
'response': {'communication_strategy': 'Notifications sent to affected '
'individuals (June 3, 2024)'},
'title': 'Cross Catholic Outreach, Inc. Data Breach (2024)',
'type': 'Data Breach'}