EFGH

On February 19, PaperlessPay Corporation in Jacksonville, Florida became a victim of a data breach.

It was contacted by the Department of Homeland Security and informed that someone was offering access to their clients’ data for sale on the dark web.

PaperlessPay assists its clients with generating paystubs and W-2 data.

PaperlessPay had to shut down its web server and SQL server.

The potentially accessed information included name, address, pay and withholdings information, bank account number information, and Social Security number.

Source: https://www.databreaches.net/thousands-of-employees-at-risk-of-identity-theft-tax-refund-fraud-after-hack-of-e-payroll-vendor/

TPRM report: https://scoringcyber.rankiteo.com/company/paperlesspay-corp

"id": "efg1841291222",
"linkid": "paperlesspay-corp",
"type": "Data Leak",
"date": "02/2020",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'payroll services',
                        'location': 'Jacksonville, Florida',
                        'name': 'PaperlessPay Corporation',
                        'type': 'company'}],
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'high',
                 'type_of_data_compromised': ['name',
                                              'address',
                                              'pay and withholdings '
                                              'information',
                                              'bank account number information',
                                              'Social Security number']},
 'date_detected': '2023-02-19',
 'description': 'On February 19, PaperlessPay Corporation in Jacksonville, '
                'Florida became a victim of a data breach. It was contacted by '
                'the Department of Homeland Security and informed that someone '
                'was offering access to their clients’ data for sale on the '
                'dark web. PaperlessPay assists its clients with generating '
                'paystubs and W-2 data. PaperlessPay had to shut down its web '
                'server and SQL server. The potentially accessed information '
                'included name, address, pay and withholdings information, '
                'bank account number information, and Social Security number.',
 'impact': {'data_compromised': ['name',
                                 'address',
                                 'pay and withholdings information',
                                 'bank account number information',
                                 'Social Security number'],
            'systems_affected': ['web server', 'SQL server']},
 'initial_access_broker': {'data_sold_on_dark_web': True},
 'motivation': 'financial gain',
 'references': [{'source': 'Department of Homeland Security'}],
 'response': {'containment_measures': ['shut down web server',
                                       'shut down SQL server'],
              'law_enforcement_notified': True},
 'title': 'Data Breach at PaperlessPay Corporation',
 'type': 'data breach'}