IDC Research, Inc.

IDC Research, Inc. suffered an external system breach (hacking) detected on February 16, 2022, compromising the personal information of 247 individuals, including Social Security Numbers (SSNs). The incident was reported to the Maine Office of the Attorney General on April 29, 2022, with affected individuals notified via letter on April 18, 2022. The breach involved unauthorized access to sensitive data, posing risks such as identity theft, financial fraud, and long-term reputational harm to the affected individuals. While the exact method of infiltration remains undisclosed, the exposure of SSNs a high-value target for cybercriminals heightens the severity due to the potential for sustained misuse of stolen identities. The delayed detection (over two months between breach and reporting) further exacerbates concerns about the company’s incident response capabilities and data protection measures. As a research firm handling sensitive client and employee data, the breach undermines trust in IDC’s ability to safeguard confidential information, potentially impacting business relationships, regulatory compliance, and customer retention. The financial and operational repercussions may extend beyond immediate remediation costs, including legal liabilities, regulatory fines, and increased cybersecurity investments to prevent future incidents.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/23f66e01-0289-4413-b032-f2316584dbea.shtml

TPRM report: https://www.rankiteo.com/company/idc-mea

"id": "idc001082225",
"linkid": "idc-mea",
"type": "Breach",
"date": "2/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 247,
                        'name': 'IDC Research, Inc.',
                        'type': 'Corporation'}],
 'customer_advisories': 'Notification letters sent (2022-04-18)',
 'data_breach': {'number_of_records_exposed': 247,
                 'personally_identifiable_information': ['Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High (SSNs included)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2022-02-16',
 'date_publicly_disclosed': '2022-04-29',
 'description': 'The Maine Office of the Attorney General reported that IDC '
                'Research, Inc. experienced an external system breach '
                '(hacking) detected on February 16, 2022, potentially '
                "affecting 247 individuals' personal information, including "
                'Social Security Numbers. The breach was reported to the '
                'agency on April 29, 2022, and a notification letter was sent '
                'to affected individuals on April 18, 2022.',
 'impact': {'data_compromised': ['Social Security Numbers'],
            'identity_theft_risk': 'High (SSNs exposed)'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Reported to the Maine '
                                                       'Office of the Attorney '
                                                       'General (2022-04-29)'},
 'response': {'communication_strategy': 'Notification letters sent to affected '
                                        'individuals (2022-04-18)'},
 'title': 'IDC Research, Inc. External System Breach (2022)',
 'type': 'Data Breach (Hacking)'}