Example Corp

In March 2023, Example Corp experienced a significant data breach impacting customer data. Hackers were able to exploit a known vulnerability in the company's web application, gaining unauthorized access to the personal information of approximately 200,000 customers, including names, email addresses, and encrypted passwords. The breach was detected by the internal security team two days after the initial compromise. Immediate actions were taken to secure the breached system, notify affected individuals, and regulatory bodies. The incident has raised concerns about the company's cybersecurity practices and its impact on customer trust.

Source: https://www.dhs.gov/topics/cybersecurity

TPRM report: https://scoringcyber.rankiteo.com/company/example-corp

"id": "exa909050624",
"linkid": "example-corp",
"type": "Cyber Attack",
"date": "03/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '200,000',
                        'name': 'Example Corp',
                        'type': 'Corporation'}],
 'attack_vector': 'Known vulnerability in web application',
 'data_breach': {'data_encryption': 'Encrypted passwords',
                 'number_of_records_exposed': '200,000',
                 'personally_identifiable_information': 'Names, email '
                                                        'addresses',
                 'type_of_data_compromised': 'Personal information'},
 'date_detected': 'March 2023',
 'description': 'In March 2023, Example Corp experienced a significant data '
                'breach impacting customer data. Hackers were able to exploit '
                "a known vulnerability in the company's web application, "
                'gaining unauthorized access to the personal information of '
                'approximately 200,000 customers, including names, email '
                'addresses, and encrypted passwords. The breach was detected '
                'by the internal security team two days after the initial '
                'compromise. Immediate actions were taken to secure the '
                'breached system, notify affected individuals, and regulatory '
                "bodies. The incident has raised concerns about the company's "
                'cybersecurity practices and its impact on customer trust.',
 'impact': {'brand_reputation_impact': "Raised concerns about the company's "
                                       'cybersecurity practices and its impact '
                                       'on customer trust',
            'data_compromised': 'Personal information of approximately 200,000 '
                                'customers, including names, email addresses, '
                                'and encrypted passwords'},
 'post_incident_analysis': {'root_causes': 'Known vulnerability in web '
                                           'application'},
 'regulatory_compliance': {'regulatory_notifications': 'Notify regulatory '
                                                       'bodies'},
 'response': {'communication_strategy': 'Notify affected individuals and '
                                        'regulatory bodies',
              'containment_measures': 'Secure the breached system'},
 'threat_actor': 'Hackers',
 'title': 'Example Corp Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Known vulnerability'}