Merchant One, Inc.

The Maine Office of the Attorney General reported that Merchant One, Inc. experienced a data breach on February 24, 2020, due to suspicious activity related to a third-party IT provider. The breach potentially affected 24 Maine residents and involved unauthorized access to personal information, including names, addresses, Social Security numbers, and financial account information. Written notice was provided to affected individuals on November 23, 2020, and credit monitoring services were offered for one year.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f24fa6dd-359c-4ba4-9251-5bfe32b6bbf5.shtml

TPRM report: https://www.rankiteo.com/company/merchant-one

"id": "mer748072525",
"linkid": "merchant-one",
"type": "Breach",
"date": "2/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 24,
                        'name': 'Merchant One, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Third-party IT provider',
 'customer_advisories': 'Credit monitoring services offered for one year',
 'data_breach': {'number_of_records_exposed': 24,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'addresses',
                                              'Social Security numbers',
                                              'financial account information']},
 'date_detected': '2020-02-24',
 'date_publicly_disclosed': '2020-11-23',
 'description': 'Merchant One, Inc. experienced a data breach on February 24, '
                '2020, due to suspicious activity related to a third-party IT '
                'provider. The breach potentially affected 24 Maine residents '
                'and involved unauthorized access to personal information, '
                'including names, addresses, Social Security numbers, and '
                'financial account information. Written notice was provided to '
                'affected individuals on November 23, 2020, and credit '
                'monitoring services were offered for one year.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'Social Security numbers',
                                 'financial account information']},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'response': {'communication_strategy': 'Written notice provided to affected '
                                        'individuals'},
 'title': 'Merchant One, Inc. Data Breach',
 'type': 'Data Breach'}