HRM Enterprises, Inc.

The Vermont Office of the Attorney General reported a data breach involving HRM Enterprises on July 26, 2023. The breach, which occurred due to unauthorized access to CommerceV3 systems between November 24, 2021, and December 14, 2022, potentially affected payment card information for an unknown number of individuals. The specific types of data compromised included names, email addresses, billing addresses, CVV codes, and expiration dates of payment cards.

Source: https://ago.vermont.gov/document/2023-07-26-hrm-enterprises-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/hrm-enterprises-inc

"id": "hrm504072525",
"linkid": "hrm-enterprises-inc",
"type": "Breach",
"date": "11/2021",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'name': 'HRM Enterprises', 'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'email addresses',
                                              'billing addresses',
                                              'CVV codes',
                                              'expiration dates of payment '
                                              'cards']},
 'date_detected': '2023-07-26',
 'date_publicly_disclosed': '2023-07-26',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving HRM Enterprises on July 26, 2023. The '
                'breach, which occurred due to unauthorized access to '
                'CommerceV3 systems between November 24, 2021, and December '
                '14, 2022, potentially affected payment card information for '
                'an unknown number of individuals. The specific types of data '
                'compromised included names, email addresses, billing '
                'addresses, CVV codes, and expiration dates of payment cards.',
 'impact': {'data_compromised': ['names',
                                 'email addresses',
                                 'billing addresses',
                                 'CVV codes',
                                 'expiration dates of payment cards'],
            'payment_information_risk': True,
            'systems_affected': ['CommerceV3 systems']},
 'references': [{'date_accessed': '2023-07-26',
                 'source': 'Vermont Office of the Attorney General'}],
 'title': 'Data Breach at HRM Enterprises',
 'type': 'Data Breach'}