Morley Companies Inc. experienced a data breach after it suffered a ransomware attack on August 1st, 2021, that allowed threat actors to steal data before encrypting files.
The threat actors stole the personal information of 521,046 individuals during the attack, including data for Morley's employees, contractors, and clients.
The data included Full name, Social Security number, Date of birth, Client ID number, Medical diagnostic and treatment information, and Health insurance information.
Morley covered the cost of 24 months of identity theft protection services through IDX for all affected individuals.
Source: https://www.databreaches.net/morley-companies-data-breach-4-3m-class-action-settlement/
TPRM report: https://scoringcyber.rankiteo.com/company/morley-companies-inc
"id": "mor1626241222",
"linkid": "morley-companies-inc",
"type": "Breach",
"date": "08/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 521046,
'name': 'Morley Companies Inc.',
'type': 'Company'}],
'attack_vector': 'Ransomware',
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': 521046,
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Full name',
'Social Security number',
'Date of birth',
'Client ID number',
'Medical diagnostic and '
'treatment information',
'Health insurance information']},
'date_detected': '2021-08-01',
'description': 'Morley Companies Inc. experienced a data breach after it '
'suffered a ransomware attack on August 1st, 2021, that '
'allowed threat actors to steal data before encrypting files. '
'The threat actors stole the personal information of 521,046 '
"individuals during the attack, including data for Morley's "
'employees, contractors, and clients. The data included Full '
'name, Social Security number, Date of birth, Client ID '
'number, Medical diagnostic and treatment information, and '
'Health insurance information. Morley covered the cost of 24 '
'months of identity theft protection services through IDX for '
'all affected individuals.',
'impact': {'data_compromised': ['Full name',
'Social Security number',
'Date of birth',
'Client ID number',
'Medical diagnostic and treatment information',
'Health insurance information']},
'ransomware': {'data_encryption': 'Yes', 'data_exfiltration': 'Yes'},
'response': {'recovery_measures': ['24 months of identity theft protection '
'services through IDX for all affected '
'individuals']},
'title': 'Morley Companies Inc. Data Breach',
'type': 'Data Breach'}