Merrick & Company

The Maine Office of the Attorney General reported that Merrick & Company experienced a data breach on December 16, 2020, involving unauthorized access to employee email accounts. The breach affected 3,240 individuals and involved the potential compromise of social security numbers. The breach was discovered on March 23, 2021, and written notification was provided to affected individuals on April 22, 2021.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7b4e0074-eea6-444e-bba6-e5d0d4b06d13.shtml

TPRM report: https://www.rankiteo.com/company/merrick&company

"id": "mer559080425",
"linkid": "merrick&company",
"type": "Breach",
"date": "12/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 3240,
                        'name': 'Merrick & Company',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 3240,
                 'personally_identifiable_information': 'Social Security '
                                                        'Numbers',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Social Security Numbers'},
 'date_detected': '2021-03-23',
 'date_publicly_disclosed': '2021-04-22',
 'description': 'Unauthorized access to employee email accounts potentially '
                'compromising social security numbers.',
 'impact': {'data_compromised': ['Social Security Numbers'],
            'systems_affected': ['Employee Email Accounts']},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'title': 'Merrick & Company Data Breach',
 'type': 'Data Breach'}