IOU Central, Inc.

On March 24, 2025, the Maine Office of the Attorney General disclosed that IOU Central, Inc. suffered a data breach exposing the personal information of approximately 28 Maine residents. The incident was detected on February 10, 2025, and involved unauthorized access to sensitive data, including names, driver’s license/state identification numbers, and Social Security numbers (SSNs). The breach poses significant risks to affected individuals, as SSNs and government-issued IDs are prime targets for identity theft, financial fraud, and phishing attacks. While the exact method of intrusion remains undisclosed, the exposure of such high-value personal data suggests a targeted or sophisticated cyber intrusion, potentially exploiting vulnerabilities in IOU Central’s security infrastructure. The company has not confirmed whether the breach was part of a broader attack (e.g., ransomware or credential stuffing) or an isolated incident. However, the leak of SSNs and ID numbers elevates the severity, as this information can be used to open fraudulent accounts, file fake tax returns, or commit long-term identity fraud. Regulatory scrutiny and potential legal repercussions (e.g., under state data protection laws) may follow, given the sensitive nature of the exposed data. Affected individuals are likely being notified and advised to monitor their credit reports, place fraud alerts, or enroll in identity protection services. The breach underscores the critical need for robust cybersecurity measures, particularly for firms handling financially sensitive personal data.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/38221494-e20e-4d93-8d8c-21c53fae3d37.html

TPRM report: https://www.rankiteo.com/company/iou-central-inc

"id": "iou005091825",
"linkid": "iou-central-inc",
"type": "Breach",
"date": "9/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '28 (Maine residents)',
                        'name': 'IOU Central, Inc.',
                        'type': 'Corporation'}],
 'data_breach': {'number_of_records_exposed': '28',
                 'personally_identifiable_information': ['names',
                                                         "driver's "
                                                         'license/state '
                                                         'identification '
                                                         'numbers',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2025-02-10',
 'date_publicly_disclosed': '2025-03-24',
 'description': 'The Maine Office of the Attorney General reported that IOU '
                'Central, Inc. experienced a data breach potentially affecting '
                'the personal information of approximately 28 Maine residents. '
                'The breach may have involved unauthorized access to '
                "individuals' names, driver's license/state identification "
                'numbers, and Social Security numbers.',
 'impact': {'data_compromised': ['names',
                                 "driver's license/state identification "
                                 'numbers',
                                 'Social Security numbers'],
            'identity_theft_risk': 'High (PII exposed)'},
 'references': [{'date_accessed': '2025-03-24',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'communication_strategy': 'Public disclosure via Maine Office of '
                                        'the Attorney General'},
 'title': 'IOU Central, Inc. Data Breach (2025)',
 'type': 'Data Breach'}