The Voice of America Centre, an outdoor shopping mall in West Chester, Ohio, had its name fraudulently altered to *'Voice of Mexico Center'* on Google Maps and search results. While the mall’s official website retained the correct name, the unauthorized change persisted until Mid Atlantic Properties (the developer) intervened and reverted it. Cybersecurity expert Dave Hatter suggested the incident stemmed from either a failure in Google’s verification process or a compromised email account linked to the mall’s business profile. Hatter warned that such breaches could enable attackers to impersonate legitimate owners, create hidden email rules, and conduct further malicious activities (e.g., password resets, financial fraud) without detection. The incident highlights vulnerabilities in business identity verification systems and the risks of email account takeovers, which can damage reputation, erode customer trust, and expose operational weaknesses. Though no direct financial or data theft was reported, the prank underscored systemic risks in digital verification protocols.
TPRM report: https://www.rankiteo.com/company/mid-atlantic-properties-inc-
"id": "mid1024010102825",
"linkid": "mid-atlantic-properties-inc-",
"type": "Breach",
"date": "10/2025",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'retail',
'location': 'West Chester, Ohio, USA',
'name': 'Voice of America Centre',
'type': 'shopping mall'}],
'attack_vector': ['compromised email account',
'exploited verification process'],
'customer_advisories': ['Shoppers were informed via media coverage about the '
'temporary name change.'],
'date_publicly_disclosed': '2023-11-13T00:00:00Z',
'date_resolved': '2023-11-13T15:00:00Z',
'description': "The Voice of America Centre mall's name was maliciously "
"altered on Google search results and maps to 'Voice of Mexico "
"Center.' The change was likely due to either a failure in "
"Google's verification process or a compromise of the mall's "
'associated email account. The incident was resolved by Monday '
'afternoon, with the name reverted to its original form. '
'Cybersecurity experts suggest the incident may have been a '
'prank or trolling attempt, highlighting the importance of '
'strong email security measures like sophisticated passwords '
'and multi-step verification.',
'impact': {'brand_reputation_impact': ['minor reputational risk due to '
'misinformation'],
'customer_complaints': ['reported confusion by shoppers'],
'operational_impact': ['temporary misinformation',
'confusion among customers'],
'systems_affected': ['Google Business Profile',
'Google Maps listing']},
'initial_access_broker': {'entry_point': ['potentially compromised email '
'account'],
'high_value_targets': ['Google Business Profile '
'access']},
'investigation_status': 'resolved',
'lessons_learned': ['Importance of securing email accounts associated with '
'critical business profiles (e.g., Google Business).',
'Need for multi-factor authentication (MFA) to prevent '
'unauthorized access.',
'Vulnerabilities in third-party verification processes '
"(e.g., Google's) can be exploited for defacement or "
'misinformation.',
'Rapid response and public communication are essential to '
'mitigate reputational damage.'],
'motivation': ['prank', 'trolling', 'unknown'],
'post_incident_analysis': {'corrective_actions': ["Name reverted to 'Voice of "
"America Centre' on Google.",
'Review of email security '
'practices recommended.',
'Public awareness raised '
'about the importance of '
'securing business '
'profiles.'],
'root_causes': ["Possible compromise of the mall's "
'email account linked to Google '
'Business Profile.',
"Exploitation of Google's "
'verification process for business '
'name changes.',
'Lack of multi-factor '
'authentication (MFA) on critical '
'accounts.']},
'recommendations': ['Implement multi-factor authentication (MFA) for all '
'business-critical email accounts.',
'Regularly audit and update passwords for accounts linked '
'to public-facing profiles (e.g., Google Business, social '
'media).',
'Monitor business listings on platforms like Google Maps '
'for unauthorized changes.',
'Educate employees on phishing and social engineering '
'risks to prevent email compromise.',
'Use dedicated, non-generic email accounts for business '
'verification processes to limit exposure.'],
'references': [{'date_accessed': '2023-11-13',
'source': 'Local news report (unspecified outlet)'},
{'date_accessed': '2023-11-13',
'source': 'Google Business Profile verification process '
'documentation',
'url': 'https://support.google.com/business/answer/7107242'}],
'response': {'communication_strategy': ['public statement by Mid Atlantic '
'Properties',
'media coverage'],
'containment_measures': ['reverted name change on Google'],
'enhanced_monitoring': ['recommended for email accounts'],
'incident_response_plan_activated': True,
'recovery_measures': ['restored original name on Google Business '
'Profile'],
'remediation_measures': ['reviewed email security practices',
'recommended multi-step verification']},
'stakeholder_advisories': ['Mid Atlantic Properties acknowledged the issue '
'and confirmed resolution.'],
'title': 'Unauthorized Name Change of Voice of America Centre on Google to '
"'Voice of Mexico Center'",
'type': ['defacement', 'unauthorized access', 'social engineering'],
'vulnerability_exploited': ['weak email security',
'lack of multi-factor authentication (MFA)',
'Google Business Profile verification loophole']}