M&M Excavating

The Vermont Office of the Attorney General reported a data breach involving M&M Excavating on January 9, 2023. The breach was due to unauthorized access to an employee's email account around September 22, 2022, potentially exposing individuals' names, dates of birth, and driver's license numbers. Affected individuals were offered a complimentary one-year membership to Experian's IdentityWorks credit monitoring service.

Source: https://ago.vermont.gov/document/2023-01-09-mm-excavating-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/mmexcavatingmi

"id": "mme728072725",
"linkid": "mmexcavatingmi",
"type": "Breach",
"date": "9/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Excavation',
                        'name': 'M&M Excavating',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Dates of Birth',
                                              "Driver's License Numbers"]},
 'date_detected': '2022-09-22',
 'date_publicly_disclosed': '2023-01-09',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving M&M Excavating on January 9, 2023. The '
                "breach was due to unauthorized access to an employee's email "
                'account around September 22, 2022, potentially exposing '
                "individuals' names, dates of birth, and driver's license "
                'numbers. Affected individuals were offered a complimentary '
                "one-year membership to Experian's IdentityWorks credit "
                'monitoring service.',
 'impact': {'data_compromised': ['Names',
                                 'Dates of Birth',
                                 "Driver's License Numbers"]},
 'initial_access_broker': {'entry_point': 'Email Account'},
 'references': [{'date_accessed': '2023-01-09',
                 'source': 'Vermont Office of the Attorney General'}],
 'response': {'communication_strategy': 'Offered a complimentary one-year '
                                        "membership to Experian's "
                                        'IdentityWorks credit monitoring '
                                        'service'},
 'title': 'Data Breach at M&M Excavating',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Email Account'}