Crown Uniform and Linen Service

The Maine Office of the Attorney General disclosed a data breach at Crown Uniform and Linen Service, detected on August 30, 2022, but stemming from unauthorized system access between August 29 and September 6, 2022. The incident compromised the personal information of 1,537 individuals, including 9 Maine residents. While the exact type of exposed data (e.g., financial records, employee details, or customer PII) was not explicitly detailed, the breach involved unauthorized access to sensitive systems, suggesting potential exposure of personally identifiable information (PII). The delayed discovery (post-exploitation) raises concerns about the duration of vulnerability and the scope of data exfiltration. No evidence of ransomware or immediate financial fraud was reported, but the breach’s focus on personal data aligns with patterns of targeted cyber intrusions for identity theft or secondary attacks. The company’s response timeline—nearly three months before public disclosure—further highlights gaps in incident detection and transparency.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/77f51152-9242-409d-a16d-fefbdf0a31f0.shtml

TPRM report: https://www.rankiteo.com/company/crown-health-care-laundry-services

"id": "cro952091725",
"linkid": "crown-health-care-laundry-services",
"type": "Breach",
"date": "8/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 1537,
                        'industry': 'Laundry and Linen Supply',
                        'name': 'Crown Uniform and Linen Service',
                        'type': 'Business'},
                       {'customers_affected': 9,
                        'industry': 'Legal/Regulatory',
                        'location': 'Maine, USA',
                        'name': 'Maine Office of the Attorney General',
                        'type': 'Government'}],
 'data_breach': {'number_of_records_exposed': 1537,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Personal Information'},
 'date_detected': '2022-08-30',
 'date_publicly_disclosed': '2022-11-30',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Crown Uniform and Linen Service. The breach '
                'was due to unauthorized access to systems between August 29 '
                'and September 6, 2022, affecting a total of 1,537 '
                'individuals, including the personal information of 9 Maine '
                'residents.',
 'impact': {'data_compromised': 'Personal Information',
            'identity_theft_risk': 'High (Personal Information exposed)'},
 'references': [{'date_accessed': '2022-11-30',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'title': 'Data Breach at Crown Uniform and Linen Service',
 'type': 'Data Breach'}