Mercy Housing, Inc.

The California Office of the Attorney General reported a data breach involving Mercy Housing, Inc. on February 25, 2016. The breach occurred on February 19, 2016, due to an email scam resulting in the unauthorized release of 2015 W-2 forms, potentially affecting personal information such as names, addresses, Social Security numbers, wage details, and tax withholdings.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-60215

TPRM report: https://www.rankiteo.com/company/mercyhousingct

"id": "mer1038072625",
"linkid": "mercyhousingct",
"type": "Breach",
"date": "6/2015",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Housing',
                        'location': 'California',
                        'name': 'Mercy Housing, Inc.',
                        'type': 'Non-profit Organization'}],
 'attack_vector': 'Email Scam',
 'data_breach': {'file_types_exposed': ['W-2 forms'],
                 'personally_identifiable_information': ['names',
                                                         'addresses',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'addresses',
                                              'Social Security numbers',
                                              'wage details',
                                              'tax withholdings']},
 'date_detected': '2016-02-19',
 'date_publicly_disclosed': '2016-02-25',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving Mercy Housing, Inc. on February 25, 2016. '
                'The breach occurred on February 19, 2016, due to an email '
                'scam resulting in the unauthorized release of 2015 W-2 forms, '
                'potentially affecting personal information such as names, '
                'addresses, Social Security numbers, wage details, and tax '
                'withholdings.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'Social Security numbers',
                                 'wage details',
                                 'tax withholdings']},
 'initial_access_broker': {'entry_point': 'Email'},
 'post_incident_analysis': {'root_causes': 'Email Scam'},
 'references': [{'source': 'California Office of the Attorney General'}],
 'title': 'Mercy Housing, Inc. Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Social Engineering'}