College Park Industries

On June 6, 2024, the Maine Office of the Attorney General disclosed a data breach affecting College Park Industries, stemming from an unauthorized hacking incident on January 24, 2024. The breach compromised the Social Security Numbers (SSNs) of 521 individuals, including at least one Maine resident. SSNs are highly sensitive identifiers, exposing victims to risks of identity theft, financial fraud, and long-term reputational harm. In response, the company offered one year of identity theft protection services to affected individuals, acknowledging the severity of the exposure. The breach highlights vulnerabilities in the company’s cybersecurity defenses, particularly in safeguarding personally identifiable information (PII) from external threats. While no immediate financial losses or systemic disruptions were reported, the exposure of SSNs constitutes a high-risk data leak, potentially enabling malicious actors to exploit the stolen information for fraudulent activities, credit applications, or further targeted attacks. The incident underscores the critical need for robust access controls, intrusion detection, and proactive monitoring to prevent similar breaches in the future.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/28550566-aa99-4448-b630-be3af446e7e9.shtml

TPRM report: https://www.rankiteo.com/company/embla-medical

"id": "emb009091825",
"linkid": "embla-medical",
"type": "Breach",
"date": "1/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 521,
                        'name': 'College Park Industries',
                        'type': 'Organization'}],
 'attack_vector': 'Unauthorized Access (Hacking)',
 'customer_advisories': ['Identity theft protection services offered for one '
                         'year'],
 'data_breach': {'number_of_records_exposed': 521,
                 'personally_identifiable_information': 'Yes (SSNs)',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security Numbers']},
 'date_detected': '2024-01-24',
 'date_publicly_disclosed': '2024-06-06',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving College Park Industries on June 6, 2024. The '
                'breach occurred on January 24, 2024, due to unauthorized '
                'access (hacking) affecting a total of 521 individuals, with '
                'one resident specifically mentioned. The compromised '
                'information included Social Security Numbers, and identity '
                'theft protection services were offered for one year.',
 'impact': {'data_compromised': ['Social Security Numbers'],
            'identity_theft_risk': 'High (SSNs compromised)'},
 'references': [{'date_accessed': '2024-06-06',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'remediation_measures': ['Offered identity theft protection '
                                       'services for one year']},
 'title': 'Data Breach at College Park Industries',
 'type': 'Data Breach'}