Lexus of Smithtown

The Maine Office of the Attorney General reported a data breach involving Lexus of Smithtown on April 26, 2021. The breach, which occurred on September 10, 2020, involved unauthorized access to employee email accounts, potentially affecting one Maine resident's driver's license number. A total of 2,055 individuals were affected, and identity theft protection services were offered.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5d2ac6fa-f03d-4b58-b16b-a3bf43dd8977.shtml

TPRM report: https://www.rankiteo.com/company/lexus-of-smithtown

"id": "lex213072725",
"linkid": "lexus-of-smithtown",
"type": "Breach",
"date": "9/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 2055,
                        'industry': 'Automotive',
                        'location': 'Smithtown',
                        'name': 'Lexus of Smithtown',
                        'type': 'Business'}],
 'attack_vector': 'Email Compromise',
 'data_breach': {'number_of_records_exposed': 2055,
                 'personally_identifiable_information': "Driver's License "
                                                        'Number',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ["Driver's License Number"]},
 'date_detected': '2021-04-26',
 'date_publicly_disclosed': '2021-04-26',
 'description': 'Unauthorized access to employee email accounts, potentially '
                "affecting one Maine resident's driver's license number.",
 'impact': {'data_compromised': ["Driver's License Number"],
            'identity_theft_risk': 'High',
            'systems_affected': ['Email Accounts']},
 'initial_access_broker': {'entry_point': 'Email Accounts'},
 'references': [{'date_accessed': '2021-04-26',
                 'source': 'Maine Office of the Attorney General'}],
 'title': 'Data Breach at Lexus of Smithtown',
 'type': 'Data Breach'}