Custom Benefit Programs, Inc.

The Maine Office of the Attorney General reported a data breach involving Custom Benefit Programs, Inc., an Aon Company, on May 21, 2021. The breach, which occurred on December 17, 2020, was due to insider wrongdoing and affected 11,731 U.S. employees, including their social security numbers among other personal information.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ed5ef48b-f02b-4e13-b086-9a888b648165.shtml

TPRM report: https://www.rankiteo.com/company/custom-benefit-plans-inc

"id": "cus254072725",
"linkid": "custom-benefit-plans-inc",
"type": "Breach",
"date": "12/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 11731,
                        'location': 'United States',
                        'name': 'Custom Benefit Programs, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Insider Wrongdoing',
 'data_breach': {'number_of_records_exposed': 11731,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security Numbers',
                                              'Other Personal Information']},
 'date_detected': '2020-12-17',
 'date_publicly_disclosed': '2021-05-21',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Custom Benefit Programs, Inc., an Aon '
                'Company, on May 21, 2021. The breach, which occurred on '
                'December 17, 2020, was due to insider wrongdoing and affected '
                '11,731 U.S. employees, including their social security '
                'numbers among other personal information.',
 'impact': {'data_compromised': ['Social Security Numbers',
                                 'Other Personal Information']},
 'post_incident_analysis': {'root_causes': 'Insider Wrongdoing'},
 'references': [{'date_accessed': '2021-05-21',
                 'source': 'Maine Office of the Attorney General'}],
 'threat_actor': 'Insider',
 'title': 'Data Breach at Custom Benefit Programs, Inc.',
 'type': 'Data Breach'}