BearTooth Mapping, Inc.

The Washington Attorney General's Office disclosed a data breach affecting BearTooth Mapping, Inc. in January 2022. The incident, detected on November 19, 2021, stemmed from a cyberattack that exposed the email addresses and passwords of approximately 4,774 individuals. The breach originated on November 13, 2021, but the investigation confirmed that no financial data (e.g., bank details, credit card numbers) was accessed or stolen. While the compromised credentials could pose risks like phishing or unauthorized account access, the attack did not result in direct financial fraud, identity theft, or broader systemic damage. The company likely initiated remediation measures, such as notifying affected users and advising password resets, though the long-term reputational impact remains a concern. The breach highlights vulnerabilities in securing user authentication data, even when high-value financial information is unaffected.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=11303

TPRM report: https://www.rankiteo.com/company/kachemak-geospatial

"id": "kac300082125",
"linkid": "kachemak-geospatial",
"type": "Cyber Attack",
"date": "11/2021",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 4774,
                        'name': 'BearTooth Mapping, Inc.',
                        'type': 'Private Company'}],
 'data_breach': {'data_exfiltration': 'Likely (credentials stolen)',
                 'number_of_records_exposed': 4774,
                 'personally_identifiable_information': 'Partial (email '
                                                        'addresses)',
                 'sensitivity_of_data': 'Moderate (credentials)',
                 'type_of_data_compromised': ['email addresses', 'passwords']},
 'date_detected': '2021-11-19',
 'date_publicly_disclosed': '2022-01-07',
 'description': "The Washington Attorney General's Office reported a data "
                'breach involving BearTooth Mapping, Inc. The breach was a '
                'cyberattack that compromised email addresses and passwords of '
                'approximately 4,774 individuals. No financial information was '
                'accessed.',
 'impact': {'data_compromised': ['email addresses', 'passwords'],
            'identity_theft_risk': 'Potential (email/password exposure)',
            'payment_information_risk': 'None (no financial data accessed)'},
 'references': [{'date_accessed': '2022-01-07',
                 'source': "Washington Attorney General's Office"}],
 'regulatory_compliance': {'regulatory_notifications': 'Washington Attorney '
                                                       "General's Office"},
 'response': {'communication_strategy': 'Public disclosure via Washington '
                                        "Attorney General's Office"},
 'title': 'BearTooth Mapping, Inc. Data Breach (2021)',
 'type': 'Data Breach'}