On April 3, 2023, Golden Key Title Services, LLC detected unusual activity in an employee’s email account, leading to a confirmed data breach. The incident, reported to the Vermont Office of the Attorney General on November 9, 2023, exposed sensitive personal information of affected individuals. The compromised data included names, Social Security numbers (SSNs), and driver’s license numbers, though the exact number of impacted individuals remains undisclosed. The breach stemmed from unauthorized access to the employee’s email, likely through phishing or credential compromise, enabling attackers to exfiltrate highly sensitive personally identifiable information (PII). Given the nature of the exposed data SSNs and driver’s license numbers the risk of identity theft, financial fraud, or targeted scams for victims is significantly elevated. The company has not specified whether the breach was part of a broader cyber attack, ransomware incident, or an isolated vulnerability exploitation, but the focus on employee email compromise suggests a targeted intrusion to harvest customer and possibly internal data.
Source: https://ago.vermont.gov/document/2023-11-09-golden-key-title-services-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/goldendogtitletrust
"id": "gol019091825",
"linkid": "goldendogtitletrust",
"type": "Breach",
"date": "4/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'unknown',
'industry': 'Title Services / Real Estate',
'location': 'Vermont, USA',
'name': 'Golden Key Title Services, LLC',
'type': 'Business'}],
'data_breach': {'number_of_records_exposed': 'unknown',
'personally_identifiable_information': ['names',
'Social Security '
'numbers',
'driver license '
'numbers'],
'sensitivity_of_data': 'high',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)']},
'date_detected': '2023-04-03',
'date_publicly_disclosed': '2023-11-09',
'description': 'On November 9, 2023, the Vermont Office of the Attorney '
'General reported that Golden Key Title Services, LLC '
'experienced a data breach involving unusual activity in an '
"employee's email account discovered on April 3, 2023. The "
'compromised information included names, Social Security '
'numbers, and driver license numbers of potentially affected '
'individuals, though the exact number of individuals affected '
'is currently unknown.',
'impact': {'data_compromised': ['names',
'Social Security numbers',
'driver license numbers'],
'identity_theft_risk': 'high (PII exposed)',
'systems_affected': ['employee email account']},
'initial_access_broker': {'entry_point': 'employee email account'},
'references': [{'date_accessed': '2023-11-09',
'source': 'Vermont Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Vermont Office of the '
'Attorney General']},
'response': {'communication_strategy': 'Public disclosure via Vermont Office '
'of the Attorney General'},
'title': 'Golden Key Title Services, LLC Data Breach',
'type': 'Data Breach'}