Down to Earth Landscape & Irrigation

The Maine Office of the Attorney General reported that Down to Earth Landscape and Irrigation experienced a data breach resulting from an external email phishing campaign that targeted employee accounts between July 22, 2020, and October 9, 2020. In total, 5,679 individuals were affected, including the personal information of two Maine residents, specifically their names and financial account numbers. Written notifications began on April 5, 2021, and Kroll was offered for identity theft protection for one year.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0b329c25-3a73-43d5-9be9-c0ed497a8376.shtml

TPRM report: https://www.rankiteo.com/company/down-to-earth-llc

"id": "dow443080525",
"linkid": "down-to-earth-llc",
"type": "Breach",
"date": "7/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 5679,
                        'industry': 'Landscaping and Irrigation',
                        'name': 'Down to Earth Landscape and Irrigation',
                        'type': 'Business'}],
 'attack_vector': 'Phishing',
 'data_breach': {'number_of_records_exposed': 5679,
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Financial account numbers']},
 'date_publicly_disclosed': '2021-04-05',
 'description': 'The Maine Office of the Attorney General reported that Down '
                'to Earth Landscape and Irrigation experienced a data breach '
                'resulting from an external email phishing campaign that '
                'targeted employee accounts between July 22, 2020, and October '
                '9, 2020. In total, 5,679 individuals were affected, including '
                'the personal information of two Maine residents, specifically '
                'their names and financial account numbers. Written '
                'notifications began on April 5, 2021, and Kroll was offered '
                'for identity theft protection for one year.',
 'impact': {'data_compromised': ['Names', 'Financial account numbers'],
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High'},
 'initial_access_broker': {'entry_point': 'Phishing email'},
 'post_incident_analysis': {'root_causes': 'Phishing campaign'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'response': {'communication_strategy': 'Written notifications',
              'third_party_assistance': 'Kroll'},
 'title': 'Data Breach at Down to Earth Landscape and Irrigation',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Human'}