Express Services, Inc.

On October 15, 2020, Express Services, Inc. suffered a data breach resulting in the theft of documents containing personally identifiable information (PII), specifically driver’s license numbers. The incident impacted a total of 922 individuals, including 2 residents of Maine. While the exact method of the breach was not detailed, the exposure of driver’s license numbers highly sensitive PII poses significant risks for identity theft and fraud. In response, the company offered identity theft protection services through Kroll to mitigate potential harm to affected individuals. The breach underscores vulnerabilities in data security practices, particularly in safeguarding sensitive employee or customer records. No ransomware involvement was reported, and the focus remained on the unauthorized access and exfiltration of personal data, which could lead to long-term reputational and financial consequences for the affected parties.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8005246c-5311-47ea-837f-8828d617407e.shtml

TPRM report: https://www.rankiteo.com/company/express-services

"id": "exp129082125",
"linkid": "express-services",
"type": "Breach",
"date": "10/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 922,
                        'name': 'Express Services, Inc.',
                        'type': 'Company'},
                       {'customers_affected': 2,
                        'location': 'Maine, USA',
                        'name': 'Maine (State Residents)',
                        'type': 'Jurisdiction'}],
 'customer_advisories': ['Identity theft protection services offered via '
                         'Kroll'],
 'data_breach': {'data_exfiltration': 'Yes (theft of documents)',
                 'number_of_records_exposed': 922,
                 'personally_identifiable_information': ["Driver's license "
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2020-10-15',
 'description': 'The Maine Office of the Attorney General reported that '
                'Express Services, Inc. experienced a data breach on October '
                '15, 2020, involving the theft of documents containing '
                "personally identifiable information, specifically driver's "
                'license numbers. A total of 922 individuals were affected, '
                'with 2 residents affected in Maine. Identity theft protection '
                'services were made available through Kroll.',
 'impact': {'data_compromised': ["Driver's license numbers"],
            'identity_theft_risk': 'High (PII exposed)'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'law_enforcement_notified': ['Maine Office of the Attorney '
                                           'General'],
              'third_party_assistance': ['Kroll (identity theft protection '
                                         'services)']},
 'title': 'Express Services, Inc. Data Breach (2020)',
 'type': 'Data Breach'}