Direct Travel, Inc.

On April 28, 2021, Direct Travel, Inc. experienced a data breach reported by the Maine Office of the Attorney General on October 18, 2021. The incident involved unauthorized access to sensitive personal information, including dates of birth and passport numbers of approximately 1,510 individuals, with 10 Maine residents confirmed among the affected. While the exact method of the breach was not detailed, the exposure of such personally identifiable information (PII) poses risks of identity theft, fraud, or misuse. In response, the company offered 12 months of free identity monitoring services via TransUnion to mitigate potential harm. The breach did not specify whether the data was exfiltrated or merely accessed, but the nature of the compromised information—passport details and birth dates—heightens the severity due to its use in identity verification and financial fraud.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3c1c0e6b-24fc-48dd-b6f0-5421bf1ad49c.shtml

TPRM report: https://www.rankiteo.com/company/directtravelinc

"id": "dir019090625",
"linkid": "directtravelinc",
"type": "Breach",
"date": "4/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 1510,
                        'industry': 'Travel',
                        'name': 'Direct Travel, Inc.',
                        'type': 'Corporation'}],
 'customer_advisories': 'Free identity monitoring services for 12 months '
                        'through TransUnion',
 'data_breach': {'number_of_records_exposed': 1510,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['dates of birth',
                                              'passport numbers']},
 'date_detected': '2021-04-28',
 'date_publicly_disclosed': '2021-10-18',
 'description': 'On October 18, 2021, the Maine Office of the Attorney General '
                'reported a data breach involving Direct Travel, Inc. The '
                'incident occurred on April 28, 2021, during which personal '
                'information such as dates of birth and passport numbers may '
                'have been accessed. Approximately 1,510 individuals were '
                'affected, including 10 residents of Maine, and the company is '
                'offering free identity monitoring services for 12 months '
                'through TransUnion.',
 'impact': {'data_compromised': ['dates of birth', 'passport numbers'],
            'identity_theft_risk': 'High (personal information exposed)'},
 'references': [{'date_accessed': '2021-10-18',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'third_party_assistance': 'TransUnion (identity monitoring '
                                        'services)'},
 'title': 'Data Breach at Direct Travel, Inc.',
 'type': 'Data Breach'}