Holliday Ingram, LLC

The Maine Office of the Attorney General reported a data breach involving Holliday Ingram, LLC on March 7, 2021. The breach occurred between June 3, 2020, and July 16, 2020, due to unauthorized access to two employee email accounts, potentially affecting 1,936 individuals with a total of 2 residents specifically identified. Compromised information included Financial Account Numbers, and identity theft protection services were offered for one year through TransUnion.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/326e17a0-6e39-4a6e-969a-e57ba3470279.shtml

TPRM report: https://www.rankiteo.com/company/hollidayingram

"id": "hol257080425",
"linkid": "hollidayingram",
"type": "Breach",
"date": "6/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 1936,
                        'name': 'Holliday Ingram, LLC',
                        'type': 'Company'}],
 'attack_vector': 'Email Account Compromise',
 'data_breach': {'number_of_records_exposed': 1936,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Financial Account Numbers']},
 'date_detected': '2021-03-07',
 'date_publicly_disclosed': '2021-03-07',
 'description': 'Unauthorized access to two employee email accounts, '
                'potentially affecting 1,936 individuals.',
 'impact': {'data_compromised': ['Financial Account Numbers'],
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High'},
 'initial_access_broker': {'entry_point': 'Email Accounts'},
 'post_incident_analysis': {'root_causes': 'Unauthorized Access to Email '
                                           'Accounts'},
 'references': [{'date_accessed': '2021-03-07',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'third_party_assistance': ['TransUnion']},
 'title': 'Data Breach at Holliday Ingram, LLC',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized Access'}