Gnome, Inc.

Gnome, Inc. experienced a data breach reported by the Maine Attorney General's Office on March 21, 2024, though the incident was initially discovered on October 23, 2023. The breach exposed sensitive personal information, including names, driver’s license numbers, and Social Security numbers of an unspecified number of individuals. The company began notifying affected parties on December 18, 2023, with an additional 315 Maine residents informed in March 2024. The compromised data suggests a significant risk of identity theft, financial fraud, or misuse of personally identifiable information (PII). The delayed disclosure spanning nearly five months between discovery and full reporting raises concerns about the company’s incident response timeliness and transparency. The nature of the exposed data (SSNs and driver’s licenses) indicates a high potential for long-term harm to victims, including unauthorized account openings, credit damage, or targeted phishing attacks. No ransomware involvement was reported, but the breach’s scale and sensitivity of the leaked information underscore severe reputational and legal repercussions for Gnome, Inc.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2637bcb8-8000-4e08-9abf-145de9fdfca6.shtml

TPRM report: https://www.rankiteo.com/company/gnomesciences

"id": "gno124082125",
"linkid": "gnomesciences",
"type": "Breach",
"date": "10/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'unknown (including at least 315 '
                                              'Maine residents)',
                        'name': 'Gnome, Inc.',
                        'type': 'Corporation'}],
 'customer_advisories': 'Notified impacted individuals (initial notifications '
                        'on 2023-12-18, additional 315 Maine residents on '
                        '2024-03-21)',
 'data_breach': {'number_of_records_exposed': 'unknown (including at least 315 '
                                              'Maine residents)',
                 'personally_identifiable_information': ['names',
                                                         "driver's licenses",
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'high',
                 'type_of_data_compromised': ['personally identifiable '
                                              'information (PII)']},
 'date_detected': '2023-10-23',
 'date_publicly_disclosed': '2024-03-21',
 'description': "The Maine Attorney General's Office reported a data breach "
                'involving Gnome, Inc. The breach was discovered on October '
                '23, 2023, and potentially affected personal information '
                "including names, driver's licenses, and Social Security "
                'numbers of an unknown number of individuals. Gnome began '
                'notifying impacted individuals on December 18, 2023, and '
                'notified an additional 315 Maine residents on March 21, 2024.',
 'impact': {'data_compromised': ['names',
                                 "driver's licenses",
                                 'Social Security numbers'],
            'identity_theft_risk': 'high'},
 'references': [{'date_accessed': '2024-03-21',
                 'source': "Maine Attorney General's Office"}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Attorney '
                                                       "General's Office"},
 'response': {'communication_strategy': 'Notified impacted individuals '
                                        '(initial notifications on 2023-12-18, '
                                        'additional 315 Maine residents on '
                                        '2024-03-21)'},
 'title': 'Data Breach at Gnome, Inc.',
 'type': 'Data Breach'}