MetWest Terra Hospitality, LLC

The California Office of the Attorney General reported a data breach involving MetWest Terra Hospitality on March 1, 2017. On February 9, 2017, a phishing email targeted an employee, who inadvertently provided sensitive W-2 information including names, addresses, Social Security numbers, and earnings. The number of individuals affected is unknown.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-66620

TPRM report: https://www.rankiteo.com/company/metwest-terra

"id": "met424072625",
"linkid": "metwest-terra",
"type": "Breach",
"date": "2/2017",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Hospitality',
                        'name': 'MetWest Terra Hospitality',
                        'type': 'Company'}],
 'attack_vector': 'Phishing',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Addresses',
                                              'Social Security numbers',
                                              'Earnings']},
 'date_detected': '2017-02-09',
 'date_publicly_disclosed': '2017-03-01',
 'description': 'A phishing email targeted an employee, who inadvertently '
                'provided sensitive W-2 information including names, '
                'addresses, Social Security numbers, and earnings.',
 'impact': {'data_compromised': ['Names',
                                 'Addresses',
                                 'Social Security numbers',
                                 'Earnings']},
 'initial_access_broker': {'entry_point': 'Phishing Email'},
 'post_incident_analysis': {'root_causes': 'Human Error'},
 'references': [{'date_accessed': '2017-03-01',
                 'source': 'California Office of the Attorney General'}],
 'title': 'Data Breach at MetWest Terra Hospitality',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Human Error'}