Intelligent Business Solutions

The Vermont Office of the Attorney General disclosed a data breach affecting Intelligent Business Solutions (IBS) on February 10, 2023, initially detected around November 14, 2022. Unauthorized actors gained access to IBS’s systems, compromising sensitive personal information, including Social Security numbers, dates of birth, health insurance details, and medical treatment records. The breach’s scope remains unclear, with the number of impacted individuals undetermined. The exposed data particularly health and financial records poses severe risks, such as identity theft, medical fraud, and targeted phishing attacks. Given the nature of the compromised information, the incident underscores critical vulnerabilities in IBS’s cybersecurity defenses, potentially eroding trust among clients and regulatory bodies. The breach’s prolonged detection timeline further exacerbates concerns about the company’s incident response capabilities and the long-term repercussions for affected parties.

Source: https://ago.vermont.gov/document/2023-02-10-intelligent-business-solutions-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/ibs-inc-

"id": "ibs032091825",
"linkid": "ibs-inc-",
"type": "Breach",
"date": "11/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Unknown',
                        'name': 'Intelligent Business Solutions (IBS)',
                        'type': 'Organization'}],
 'data_breach': {'data_exfiltration': 'Potential (unauthorized access '
                                      'confirmed)',
                 'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Protected Health Information '
                                              '(PHI)']},
 'date_detected': '2022-11-14',
 'date_publicly_disclosed': '2023-02-10',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving Intelligent Business Solutions (IBS). The '
                'breach, discovered on or about November 14, 2022, involved '
                'unauthorized access to systems that potentially exposed '
                'personal information such as Social Security numbers, dates '
                'of birth, health insurance information, and medical treatment '
                'details. The breach may have affected an unknown number of '
                'individuals.',
 'impact': {'data_compromised': ['Social Security numbers',
                                 'dates of birth',
                                 'health insurance information',
                                 'medical treatment details'],
            'identity_theft_risk': 'High (PII exposed)'},
 'investigation_status': 'Ongoing (as of disclosure date)',
 'references': [{'date_accessed': '2023-02-10',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Vermont Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Public disclosure via Vermont Office '
                                        'of the Attorney General'},
 'title': 'Data Breach at Intelligent Business Solutions (IBS)',
 'type': 'Data Breach'}