Institute for Integrative Nutrition

The California Office of the Attorney General reported a data breach involving the Institute for Integrative Nutrition on August 16, 2020. The breach occurred due to a phishing incident that compromised one employee email account on March 3-4, 2020, potentially affecting personal information including names and Social Security numbers. Approximately 9,000 individuals were affected.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-193125

TPRM report: https://www.rankiteo.com/company/healthy-4-life-coach

"id": "hea604072925",
"linkid": "healthy-4-life-coach",
"type": "Breach",
"date": "3/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 9000,
                        'industry': 'Education',
                        'name': 'Institute for Integrative Nutrition',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Phishing',
 'data_breach': {'number_of_records_exposed': 9000,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers']},
 'date_detected': '2020-03-03',
 'date_publicly_disclosed': '2020-08-16',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving the Institute for Integrative Nutrition on '
                'August 16, 2020. The breach occurred due to a phishing '
                'incident that compromised one employee email account on March '
                '3-4, 2020, potentially affecting personal information '
                'including names and Social Security numbers. Approximately '
                '9,000 individuals were affected.',
 'impact': {'data_compromised': ['Names', 'Social Security numbers']},
 'initial_access_broker': {'entry_point': 'Compromised Employee Email Account'},
 'post_incident_analysis': {'root_causes': 'Phishing Incident'},
 'references': [{'date_accessed': '2020-08-16',
                 'source': 'California Office of the Attorney General'}],
 'title': 'Data Breach at Institute for Integrative Nutrition',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Compromised Employee Email Account'}