The Maine Office of the Attorney General disclosed a data breach affecting Metropolitan Realty Group (MRG) in November 2021. The incident, occurring between September 3 and November 27, 2020, involved unauthorized access to the company’s network servers and workstations, compromising sensitive personal data of 27,454 individuals, including 12 Maine residents. The exposed information included names, Social Security numbers, driver’s license details, and financial account information highly sensitive data that significantly elevates risks of identity theft, financial fraud, and long-term reputational harm. MRG responded by offering 12 months of credit monitoring services to affected individuals, a standard remedial measure for breaches of this scale. The prolonged exposure window (over two months) and the nature of the stolen data particularly SSNs and financial records suggest a severe impact, as such details are prime targets for cybercriminals engaging in fraud, phishing, or further attacks. The breach underscores vulnerabilities in MRG’s cybersecurity infrastructure, raising concerns about compliance with data protection regulations and the potential for regulatory penalties or legal action from impacted parties.
TPRM report: https://www.rankiteo.com/company/metropolitan-realty-group
"id": "met1006082125",
"linkid": "metropolitan-realty-group",
"type": "Breach",
"date": "9/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '27,454',
'industry': 'Real Estate',
'name': 'Metropolitan Realty Group',
'type': 'Real Estate'}],
'customer_advisories': '12 months of credit monitoring services offered',
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '27,454',
'personally_identifiable_information': ['names',
'Social Security '
'numbers',
"driver's licenses"],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['PII', 'financial data']},
'date_publicly_disclosed': '2021-11-10',
'description': 'The Maine Office of the Attorney General reported a data '
'breach involving Metropolitan Realty Group. The breach '
'occurred between September 3 and November 27, 2020, involving '
'unauthorized access to network servers and workstations. '
'Approximately 27,454 individuals, including 12 Maine '
'residents, were affected. Compromised data included names, '
"Social Security numbers, driver's licenses, and financial "
'account information. MRG offered 12 months of credit '
'monitoring services to impacted individuals.',
'impact': {'data_compromised': ['names',
'Social Security numbers',
"driver's licenses",
'financial account information'],
'identity_theft_risk': 'High (PII and financial data exposed)',
'payment_information_risk': 'Yes (financial account information '
'compromised)',
'systems_affected': ['network servers', 'workstations']},
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
'Attorney General'},
'response': {'communication_strategy': 'Offered 12 months of credit '
'monitoring services to impacted '
'individuals'},
'title': 'Metropolitan Realty Group Data Breach (2020)',
'type': 'Data Breach'}