Iran Insurance

The hackers' claim has been verified by the Iranian Leakage Tracking System (Leakfa), which claims that the data was acquired via an intrusion on the infrastructure of the Expert Information Technologists (Fanavaran) company.

All the information required to potentially fabricate identities is included in the data offered for sale on the dark web, including name, national identification number, date of birth, address, zip code, and mobile phone number.

Source: https://www.iranintl.com/en/202312264629

TPRM report: https://scoringcyber.rankiteo.com/company/iran-insurance

"id": "ira64301223",
"linkid": "iran-insurance",
"type": "Data Leak",
"date": "12/2023",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Information Technology',
                        'name': 'Expert Information Technologists (Fanavaran)',
                        'type': 'Company'}],
 'attack_vector': 'Intrusion on infrastructure',
 'data_breach': {'data_exfiltration': 'Yes',
                 'personally_identifiable_information': ['Name',
                                                         'National '
                                                         'Identification '
                                                         'Number',
                                                         'Date of Birth',
                                                         'Address',
                                                         'Zip Code',
                                                         'Mobile Phone Number'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information']},
 'description': "The hackers' claim has been verified by the Iranian Leakage "
                'Tracking System (Leakfa), which claims that the data was '
                'acquired via an intrusion on the infrastructure of the Expert '
                'Information Technologists (Fanavaran) company. All the '
                'information required to potentially fabricate identities is '
                'included in the data offered for sale on the dark web, '
                'including name, national identification number, date of '
                'birth, address, zip code, and mobile phone number.',
 'impact': {'data_compromised': ['Name',
                                 'National Identification Number',
                                 'Date of Birth',
                                 'Address',
                                 'Zip Code',
                                 'Mobile Phone Number'],
            'identity_theft_risk': 'High'},
 'initial_access_broker': {'data_sold_on_dark_web': 'Yes'},
 'motivation': 'Data Theft',
 'references': [{'source': 'Iranian Leakage Tracking System (Leakfa)'}],
 'threat_actor': 'Hackers',
 'title': 'Data Breach at Expert Information Technologists (Fanavaran)',
 'type': 'Data Breach'}