The Day & Zimmermann Group, Inc.

The Maine Office of the Attorney General reported on October 2, 2023, that The Day & Zimmermann Group, Inc. experienced an inadvertent disclosure of information due to an error made during a vendor update to its Human Resources system, SuccessFactors, which occurred from September 8 to September 10, 2023. A total of 3,222 individuals were affected, with 2 residents specifically reported, and identity theft protection services including credit monitoring were offered.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/49a8a544-0020-4838-8ccf-191939d00f68.shtml

TPRM report: https://www.rankiteo.com/company/day-&-zimmermann

"id": "day1036072625",
"linkid": "day-&-zimmermann",
"type": "Breach",
"date": "9/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 3222,
                        'industry': 'Human Resources',
                        'name': 'The Day & Zimmermann Group, Inc.',
                        'type': 'Corporation'}],
 'attack_vector': 'Vendor Update Error',
 'data_breach': {'number_of_records_exposed': 3222,
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Personal Information'},
 'date_detected': '2023-09-08',
 'date_publicly_disclosed': '2023-10-02',
 'description': 'The Maine Office of the Attorney General reported on October '
                '2, 2023, that The Day & Zimmermann Group, Inc. experienced an '
                'inadvertent disclosure of information due to an error made '
                'during a vendor update to its Human Resources system, '
                'SuccessFactors, which occurred from September 8 to September '
                '10, 2023. A total of 3,222 individuals were affected, with 2 '
                'residents specifically reported, and identity theft '
                'protection services including credit monitoring were offered.',
 'impact': {'data_compromised': 'Personal Information',
            'identity_theft_risk': 'High',
            'systems_affected': 'Human Resources System (SuccessFactors)'},
 'post_incident_analysis': {'root_causes': 'Human Error during vendor update'},
 'references': [{'date_accessed': '2023-10-02',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'remediation_measures': 'Offered identity theft protection '
                                      'services including credit monitoring'},
 'title': 'Inadvertent Disclosure of Information at The Day & Zimmermann '
          'Group, Inc.',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Human Error'}