The California Office of the Attorney General reported a data breach involving Lobel Financial Corporation on November 9, 2023. The breach occurred on May 31, 2023, due to the MOVEit zero-day vulnerability affecting CBIZ, resulting in unauthorized access to personal information, including names, dates of birth, and employment information, affecting an unspecified number of individuals.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-576333
TPRM report: https://www.rankiteo.com/company/lobelfinancial
"id": "lob143072625",
"linkid": "lobelfinancial",
"type": "Vulnerability",
"date": "5/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'customers_affected': 'unspecified number of '
'individuals',
'industry': 'Finance',
'name': 'Lobel Financial Corporation',
'type': 'Financial Corporation'}],
'attack_vector': 'Zero-day vulnerability',
'data_breach': {'number_of_records_exposed': 'unspecified',
'personally_identifiable_information': True,
'type_of_data_compromised': ['names',
'dates of birth',
'employment information']},
'date_detected': '2023-05-31',
'date_publicly_disclosed': '2023-11-09',
'description': 'The California Office of the Attorney General reported a data '
'breach involving Lobel Financial Corporation on November 9, '
'2023. The breach occurred on May 31, 2023, due to the MOVEit '
'zero-day vulnerability affecting CBIZ, resulting in '
'unauthorized access to personal information, including names, '
'dates of birth, and employment information, affecting an '
'unspecified number of individuals.',
'impact': {'data_compromised': ['names',
'dates of birth',
'employment information']},
'references': [{'date_accessed': '2023-11-09',
'source': 'California Office of the Attorney General'}],
'title': 'Data Breach at Lobel Financial Corporation',
'type': 'Data Breach',
'vulnerability_exploited': 'MOVEit zero-day vulnerability'}