The Maine Office of the Attorney General disclosed on July 7, 2021, that Freedom Insurance Agency suffered a data breach stemming from a configuration error at its third-party vendor, Vertafore. The incident occurred on November 30, 2020, exposing the driver’s license numbers of 6,465 individuals. The breach was attributed to misconfigured storage settings, allowing unauthorized access to sensitive personal data. While the exposed information was limited to driver’s license numbers without evidence of financial or broader identity theft the incident raised concerns over third-party risk management and the protection of personally identifiable information (PII). The company likely faced reputational damage and potential regulatory scrutiny, though no immediate financial fraud or systemic operational disruption was reported. The breach underscored vulnerabilities in vendor security practices and the cascading risks posed by supply-chain cybersecurity lapses.
TPRM report: https://www.rankiteo.com/company/freedom-insurance-agency
"id": "fre033090625",
"linkid": "freedom-insurance-agency",
"type": "Breach",
"date": "11/2020",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '6,465',
'industry': 'Insurance',
'name': 'Freedom Insurance Agency',
'type': 'Insurance Agency'},
{'industry': 'Technology/Software',
'name': 'Vertafore',
'type': 'Third-Party Vendor'}],
'attack_vector': 'Misconfiguration (Third-Party Vendor)',
'data_breach': {'number_of_records_exposed': '6,465',
'personally_identifiable_information': "Yes (Driver's License "
'Numbers)',
'sensitivity_of_data': 'High (Personally Identifiable '
'Information)',
'type_of_data_compromised': ["Driver's License Numbers"]},
'date_publicly_disclosed': '2021-07-07',
'description': 'The Maine Office of the Attorney General reported that '
'Freedom Insurance Agency experienced a data breach due to a '
'configuration error at its third-party vendor, Vertafore. The '
"breach potentially impacted the driver's license numbers of "
'6,465 individuals.',
'impact': {'data_compromised': ["Driver's License Numbers"],
'identity_theft_risk': "Potential (Driver's License Numbers)"},
'post_incident_analysis': {'root_causes': 'Configuration error at third-party '
'vendor (Vertafore)'},
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
'Attorney General'},
'response': {'communication_strategy': 'Public Disclosure via Maine Office of '
'the Attorney General'},
'title': 'Freedom Insurance Agency Data Breach via Vertafore Configuration '
'Error',
'type': 'Data Breach',
'vulnerability_exploited': 'Configuration Error'}