The Maine Office of the Attorney General reported that Rock County Human Services Department experienced a data breach on February 28, 2022, involving a phishing email campaign that resulted in a business email compromise. The breach, discovered on June 14, 2022, potentially affected the Social Security Numbers of 25,610 individuals, including one Maine resident. Rock County HSD offered 12 months of identity theft protection services through Experian IdentityWorks.
TPRM report: https://www.rankiteo.com/company/county-of-rock
"id": "cou350072525",
"linkid": "county-of-rock",
"type": "Breach",
"date": "2/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'customers_affected': 25610,
'industry': 'Health and Human Services',
'location': 'Rock County',
'name': 'Rock County Human Services Department',
'type': 'Government'}],
'attack_vector': 'Phishing',
'data_breach': {'number_of_records_exposed': 25610,
'personally_identifiable_information': 'Social Security '
'Numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Social Security Numbers'},
'date_detected': '2022-06-14',
'description': 'A phishing email campaign resulted in a business email '
'compromise, potentially affecting the Social Security Numbers '
'of 25,610 individuals, including one Maine resident.',
'impact': {'data_compromised': ['Social Security Numbers'],
'identity_theft_risk': 'High'},
'initial_access_broker': {'entry_point': 'Phishing Email'},
'references': [{'source': 'Maine Office of the Attorney General'}],
'response': {'third_party_assistance': ['Experian IdentityWorks']},
'title': 'Rock County Human Services Department Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Business Email Compromise'}