Far Niente Winery

On August 21, 2017, Far Niente Winery suffered a data breach involving unauthorized access to its computer network. During the incident, files were encrypted, raising concerns about the potential exposure of sensitive personal information, including names, addresses, and Social Security numbers. However, the California Office of the Attorney General’s report clarified that there was no evidence to suggest the unauthorized individual viewed, copied, or misused any of the compromised data. While the breach involved encryption—often associated with ransomware tactics—the lack of confirmed data exfiltration or malicious use mitigated the immediate harm. The incident primarily highlighted vulnerabilities in the company’s network security, though the actual impact on affected individuals remained speculative rather than confirmed.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-108214

TPRM report: https://www.rankiteo.com/company/far-niente-winery

"id": "far200082025",
"linkid": "far-niente-winery",
"type": "Ransomware",
"date": "8/2017",
"severity": "50",
"impact": "1",
"explanation": "Attack without any consequences"

{'affected_entities': [{'industry': 'Wine/Alcohol Production',
                        'location': 'California, USA',
                        'name': 'Far Niente Winery',
                        'type': 'Private Company'}],
 'data_breach': {'data_encryption': 'files were encrypted',
                 'data_exfiltration': 'no evidence of exfiltration',
                 'personally_identifiable_information': ['names',
                                                         'addresses',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'high (includes SSNs)',
                 'type_of_data_compromised': ['personal information']},
 'date_detected': '2017-08-21',
 'description': 'The California Office of the Attorney General reported that '
                'Far Niente Winery experienced a data breach on August 21, '
                '2017. The breach involved unauthorized access to the '
                "company's computer network, during which files were "
                'encrypted, potentially exposing personal information '
                'including names, addresses, and Social Security numbers. The '
                'report indicated that no evidence suggested the unauthorized '
                'person viewed or obtained any information.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'Social Security numbers'],
            'identity_theft_risk': 'potential (no evidence of access)',
            'systems_affected': ['computer network']},
 'investigation_status': 'completed (no evidence of data access)',
 'ransomware': {'data_encryption': 'yes (files encrypted)',
                'data_exfiltration': 'no evidence'},
 'references': [{'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['California Office of '
                                                        'the Attorney '
                                                        'General']},
 'title': 'Far Niente Winery Data Breach (2017)',
 'type': 'Data Breach'}