Industrial Scientific Corporation

On October 1, 2024, the Maine Office of the Attorney General disclosed a data breach at Industrial Scientific Corporation, attributed to an external hacking incident. The breach occurred over a prolonged period—between January 25, 2023, and November 6, 2023—and compromised the personal information of at least one Maine resident, including full names and sensitive data types. While the exact scope of the exposed data was not detailed, the nature of the breach (external system hacking) and the involvement of sensitive personal information suggest a targeted cyber intrusion. In response, the company offered 24 months of complimentary credit monitoring via Equifax to the affected individual, indicating an acknowledgment of potential financial or identity theft risks. The incident highlights vulnerabilities in the company’s external systems, though the limited public disclosure restricts a full assessment of broader implications or additional impacted parties.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d66aff4c-a564-4842-a4f1-5ae68f6c252f.html

TPRM report: https://www.rankiteo.com/company/industrial-scientific

"id": "ind008091825",
"linkid": "industrial-scientific",
"type": "Breach",
"date": "1/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '1 (Maine Resident)',
                        'name': 'Industrial Scientific Corporation',
                        'type': 'Corporation'},
                       {'industry': 'Legal/Regulatory',
                        'location': 'Maine, USA',
                        'name': 'Maine Office of the Attorney General',
                        'type': 'Government Agency'}],
 'attack_vector': 'External System Breach (Hacking)',
 'customer_advisories': '24 months of complimentary credit monitoring via '
                        'Equifax offered to affected individual.',
 'data_breach': {'number_of_records_exposed': '1',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Full Names']},
 'date_publicly_disclosed': '2024-10-01',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Industrial Scientific Corporation, '
                'identified as an external system breach (hacking). The '
                'incident occurred between January 25, 2023, and November 6, '
                '2023, compromising personal information of at least one Maine '
                'resident, including full names and other sensitive data. The '
                'company offered 24 months of complimentary credit monitoring '
                'via Equifax to the affected individual.',
 'impact': {'data_compromised': ['Full Names',
                                 'Sensitive Personal Information'],
            'identity_theft_risk': 'High (Credit Monitoring Offered)'},
 'references': [{'date_accessed': '2024-10-01',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'communication_strategy': 'Public Disclosure via Maine AG '
                                        'Office; Credit Monitoring Offer to '
                                        'Affected Individual',
              'third_party_assistance': ['Equifax (Credit Monitoring)']},
 'title': 'Industrial Scientific Corporation Data Breach (2023)',
 'type': 'Data Breach'}