M Holdings Securities, Inc.

The California Office of the Attorney General reported that M Holdings Securities, Inc. experienced a data breach due to the theft of an employee's company laptop from a parked car on July 29, 2016. The breach potentially affected certain personal information including names, addresses, Social Security numbers, driver’s license numbers, and financial account numbers. As of the reporting date, 08/31/2016, there was no evidence of fraud or misuse of the affected individuals' information.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-63675

TPRM report: https://www.rankiteo.com/company/m-holdings-securities-inc-

"id": "m-h939072525",
"linkid": "m-holdings-securities-inc-",
"type": "Breach",
"date": "7/2016",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Financial Services',
                        'name': 'M Holdings Securities, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Physical Theft',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'addresses',
                                              'Social Security numbers',
                                              'driver’s license numbers',
                                              'financial account numbers']},
 'date_detected': '2016-07-29',
 'date_publicly_disclosed': '2016-08-31',
 'description': 'The California Office of the Attorney General reported that M '
                'Holdings Securities, Inc. experienced a data breach due to '
                "the theft of an employee's company laptop from a parked car "
                'on July 29, 2016. The breach potentially affected certain '
                'personal information including names, addresses, Social '
                'Security numbers, driver’s license numbers, and financial '
                'account numbers. As of the reporting date, 08/31/2016, there '
                'was no evidence of fraud or misuse of the affected '
                "individuals' information.",
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'Social Security numbers',
                                 'driver’s license numbers',
                                 'financial account numbers']},
 'initial_access_broker': {'entry_point': 'Physical Theft'},
 'motivation': 'Unknown',
 'post_incident_analysis': {'root_causes': 'Lack of Physical Security'},
 'references': [{'date_accessed': '2016-08-31',
                 'source': 'California Office of the Attorney General'}],
 'threat_actor': 'Unknown',
 'title': 'M Holdings Securities, Inc. Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Lack of Physical Security'}