On September 30, 2020, Bonita Springs Utilities, Inc. (BSU) experienced a data breach after an unauthorized actor gained access to the systems of its third-party vendor, TMR, around August 21, 2020. The incident exposed the personal and financial information of 3,143 individuals, including names, financial account numbers, and routing numbers, with the compromised data spanning from February to May 2020. The breach primarily affected customers, with 25 Maine residents formally notified by BSU. The exposed financial details pose a significant risk of fraud, identity theft, or financial exploitation for the impacted individuals. While the breach originated from a third-party vendor, BSU’s customer data was directly compromised, highlighting vulnerabilities in supply chain cybersecurity. The incident underscores the potential for long-term reputational damage and financial liabilities for BSU, as well as the need for stricter vendor risk management protocols to prevent future exposures of sensitive customer information.
TPRM report: https://www.rankiteo.com/company/management-recruiters-of-bonita-springs-inc.
"id": "man237090225",
"linkid": "management-recruiters-of-bonita-springs-inc.",
"type": "Breach",
"date": "2/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '3,143 individuals (25 Maine '
'residents notified)',
'industry': 'Utilities',
'location': 'Bonita Springs, Florida, USA',
'name': 'Bonita Springs Utilities, Inc. (BSU)',
'type': 'Utility Company'},
{'name': 'TMR (Third-Party Vendor)', 'type': 'Vendor'}],
'customer_advisories': '25 Maine residents notified of the breach by BSU',
'data_breach': {'data_exfiltration': 'Likely (unauthorized access to systems)',
'number_of_records_exposed': '3,143',
'personally_identifiable_information': ['names',
'financial account '
'numbers',
'routing numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Financial Data']},
'date_detected': '2020-08-21',
'date_publicly_disclosed': '2020-09-30',
'description': 'On September 30, 2020, the Maine Office of the Attorney '
'General reported a data breach involving Bonita Springs '
'Utilities, Inc. (BSU) that occurred when an unauthorized '
"actor accessed third-party vendor TMR's systems on or about "
'August 21, 2020. The breach potentially exposed the personal '
'information of 3,143 individuals, which included names, '
'financial account numbers, and routing numbers, with the '
'exact date range of the compromised information being from '
'February to May 2020. BSU notified 25 Maine residents of the '
'incident.',
'impact': {'data_compromised': ['names',
'financial account numbers',
'routing numbers'],
'identity_theft_risk': 'Potential (due to exposed PII and '
'financial data)',
'payment_information_risk': 'High (financial account numbers and '
'routing numbers exposed)',
'systems_affected': ["TMR's systems (third-party vendor)"]},
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
'Attorney General']},
'response': {'communication_strategy': 'Notification to affected individuals '
'(25 Maine residents notified by BSU)'},
'threat_actor': 'Unauthorized Actor',
'title': 'Data Breach at Bonita Springs Utilities, Inc. via Third-Party '
'Vendor TMR',
'type': 'Data Breach'}