Master Halco, Inc.

The Maine Office of the Attorney General reported a data breach involving Master Halco, Inc. on January 22, 2021. The breach occurred due to an email phishing campaign that targeted employees between September 2, 2020, and September 14, 2020, affecting a total of 248 individuals, including one Maine resident whose personal information (name, Social Security number, driver's license number, financial account number) may have been compromised. Master Halco is offering one year of complimentary credit monitoring and identity theft protection services through Experian.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f92e292e-1c7e-4f8f-b703-c5cf046c9065.shtml

TPRM report: https://www.rankiteo.com/company/master-halco-inc

"id": "mas406072725",
"linkid": "master-halco-inc",
"type": "Breach",
"date": "9/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 248,
                        'name': 'Master Halco, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Phishing',
 'data_breach': {'number_of_records_exposed': 248,
                 'personally_identifiable_information': ['name',
                                                         'Social Security '
                                                         'number',
                                                         "driver's license "
                                                         'number',
                                                         'financial account '
                                                         'number'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Financial Information']},
 'date_detected': '2021-01-22',
 'date_publicly_disclosed': '2021-01-22',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Master Halco, Inc. on January 22, 2021. The '
                'breach occurred due to an email phishing campaign that '
                'targeted employees between September 2, 2020, and September '
                '14, 2020, affecting a total of 248 individuals, including one '
                'Maine resident whose personal information (name, Social '
                "Security number, driver's license number, financial account "
                'number) may have been compromised. Master Halco is offering '
                'one year of complimentary credit monitoring and identity '
                'theft protection services through Experian.',
 'impact': {'data_compromised': ['name',
                                 'Social Security number',
                                 "driver's license number",
                                 'financial account number'],
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High'},
 'initial_access_broker': {'entry_point': 'Email'},
 'post_incident_analysis': {'root_causes': 'Phishing campaign'},
 'references': [{'date_accessed': '2021-01-22',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'third_party_assistance': 'Experian'},
 'title': 'Master Halco Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Human'}