Dobson Technologies Inc. experienced a targeted cyberattack between November 19, 2022, and March 3, 2023, compromising sensitive personal information of U.S. residents, including names, Social Security numbers, financial account details, and other private data. The breach led to a $450,000 class-action settlement, with affected individuals eligible for reimbursements (up to $2,000 for out-of-pocket expenses, $80 for lost time, or a flat $50 payment) and one year of credit monitoring with $1 million in identity theft insurance. The lawsuit alleged Dobson failed to adequately safeguard data, though the company denied wrongdoing. The breach exposed customers to risks like identity theft, fraud, and financial losses, prompting legal action and compensatory measures.
Source: https://www.claimdepot.com/settlements/dobson-tech-settlement
TPRM report: https://www.rankiteo.com/company/corevault
"id": "cor0902509101125",
"linkid": "corevault",
"type": "Cyber Attack",
"date": "11/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 'All U.S. residents whose '
'personal information was '
'compromised (exact number '
'unspecified)',
'name': 'Dobson Technologies Inc.',
'type': 'Corporation'}],
'customer_advisories': ['Credit monitoring enrollment',
'Identity theft protection',
'Claim filing support (online/phone/email)'],
'data_breach': {'data_exfiltration': 'Likely (data exposed in breach)',
'personally_identifiable_information': ['Names',
'Social Security '
'numbers',
'Financial account '
'details'],
'sensitivity_of_data': 'High (SSNs, financial details)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Financial data']},
'date_detected': '2023-03-03',
'description': 'A targeted cyberattack on Dobson Technologies Inc. exposed '
'sensitive personal information, including names, Social '
'Security numbers, and financial account details. The breach '
'occurred between November 19, 2022, and March 3, 2023, '
'leading to a class action lawsuit and a $450,000 settlement '
'for affected individuals.',
'impact': {'brand_reputation_impact': 'Negative (class action lawsuit and '
'settlement)',
'data_compromised': ['Names',
'Social Security numbers',
'Financial account details',
'Other private information'],
'financial_loss': '$450,000 (settlement amount)',
'identity_theft_risk': 'High (exposed PII, credit monitoring '
'offered)',
'legal_liabilities': '$450,000 settlement + up to $155,000 in '
"attorneys' fees",
'payment_information_risk': 'High (financial account details '
'exposed)'},
'initial_access_broker': {'high_value_targets': ['Customer PII',
'Financial data']},
'investigation_status': 'Settled (class action lawsuit resolved)',
'post_incident_analysis': {'corrective_actions': ['Settlement payouts',
'Credit monitoring for '
'affected individuals'],
'root_causes': ['Inadequate data safeguards '
'(alleged in lawsuit)']},
'references': [{'source': 'Class Action Settlement Notice (Dobson '
'Technologies Data Breach)'},
{'source': 'Settlement Administrator Contact: Dobson Data '
'Security Incident Settlement'}],
'regulatory_compliance': {'legal_actions': ['Class action lawsuit (settled '
'for $450,000)']},
'response': {'communication_strategy': ['Class action notices',
'Settlement website/claim forms',
'Customer support via email/phone'],
'recovery_measures': ['$450,000 settlement fund',
'Credit monitoring and identity theft '
'insurance for affected individuals']},
'stakeholder_advisories': ['Settlement notices sent to affected individuals',
'Public claim filing instructions'],
'title': 'Dobson Technologies Data Breach (2022-2023)',
'type': ['Data Breach', 'Cyberattack']}