The Maine Office of the Attorney General reported that Shattuck-St. Mary's School experienced a data breach due to external hacking, affecting seven Maine residents with potentially compromised financial account numbers. The breach occurred between May 13 and May 15, 2020, and was discovered on October 19, 2020. Notification letters were sent to the affected individuals on January 8, 2021, and identity theft protection services were offered for one year through Kroll.
TPRM report: https://www.rankiteo.com/company/legacy-golf
"id": "leg411072725",
"linkid": "legacy-golf",
"type": "Breach",
"date": "5/2020",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'customers_affected': 7,
'industry': 'Education',
'location': 'Maine',
'name': "Shattuck-St. Mary's School",
'type': 'Educational Institution'}],
'attack_vector': 'External Hacking',
'data_breach': {'number_of_records_exposed': 7,
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Financial Account Numbers'},
'date_detected': '2020-10-19',
'date_publicly_disclosed': '2021-01-08',
'description': 'The Maine Office of the Attorney General reported that '
"Shattuck-St. Mary's School experienced a data breach due to "
'external hacking, affecting seven Maine residents with '
'potentially compromised financial account numbers. The breach '
'occurred between May 13 and May 15, 2020, and was discovered '
'on October 19, 2020. Notification letters were sent to the '
'affected individuals on January 8, 2021, and identity theft '
'protection services were offered for one year through Kroll.',
'impact': {'data_compromised': ['Financial Account Numbers'],
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'references': [{'source': 'Maine Office of the Attorney General'}],
'response': {'communication_strategy': 'Notification letters sent to affected '
'individuals',
'third_party_assistance': ['Kroll']},
'title': "Shattuck-St. Mary's School Data Breach",
'type': 'Data Breach'}