County of Cumberland

The Maine Office of the Attorney General reported a data breach involving an employee's email account at the County of Cumberland on October 4, 2023. The unauthorized access lasted approximately ninety minutes and potentially exposed the Social Security number of one Maine resident among a total of 1,948 affected individuals. Written notice was provided to the affected individual on February 14, 2024, and identity theft protection services for twelve months through Experian IdentityWorksSM were offered.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1742aa35-08e7-4334-b01d-1b870b69e6fe.shtml

TPRM report: https://www.rankiteo.com/company/county-of-cumberland

"id": "cou640080425",
"linkid": "county-of-cumberland",
"type": "Breach",
"date": "10/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 1948,
                        'industry': 'Public Administration',
                        'location': 'Maine, USA',
                        'name': 'County of Cumberland',
                        'type': 'Government'}],
 'attack_vector': 'Email Compromise',
 'data_breach': {'number_of_records_exposed': 1,
                 'personally_identifiable_information': 'Social Security '
                                                        'number',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Social Security number'},
 'date_detected': '2023-10-04',
 'description': 'The Maine Office of the Attorney General reported that the '
                'County of Cumberland experienced a data breach due to '
                "suspicious activity involving an employee's email account on "
                'October 4, 2023. This unauthorized access lasted '
                'approximately ninety minutes and potentially exposed the '
                'Social Security number of one Maine resident among a total of '
                '1,948 affected individuals. Written notice was provided to '
                'the affected individual on February 14, 2024, and identity '
                'theft protection services for twelve months through Experian '
                'IdentityWorksSM were offered.',
 'impact': {'data_compromised': ['Social Security number'],
            'identity_theft_risk': 'High'},
 'initial_access_broker': {'entry_point': 'Email Compromise'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'response': {'communication_strategy': 'Written notice provided to affected '
                                        'individual',
              'third_party_assistance': ['Experian IdentityWorksSM']},
 'title': 'Data Breach at County of Cumberland',
 'type': 'Data Breach'}