Multnomah Athletic Club

On December 2, 2017, the Multnomah Athletic Club experienced a data breach involving unauthorized access to sensitive personal information. The incident was reported by the Washington State Attorney General on January 2, 2018. The breach impacted 661 Washington residents, exposing critical data such as names, Social Security numbers, financial details, and other personal information. The unauthorized access posed significant risks, including potential identity theft, financial fraud, and reputational harm to affected individuals. While the exact method of the breach was not detailed, the exposure of Social Security numbers and financial records elevated the severity, as such data is highly valuable to cybercriminals. The club likely faced regulatory scrutiny, potential legal liabilities, and the need for remediation measures, such as credit monitoring for victims. The breach underscored vulnerabilities in the organization’s data protection practices, raising concerns about compliance with data security laws. The compromised information could lead to long-term consequences for those affected, including fraudulent transactions, credit damage, and persistent privacy risks. The incident also likely eroded trust among members and stakeholders, necessitating transparency and proactive steps to prevent future breaches.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=9759

TPRM report: https://www.rankiteo.com/company/multnomah-athletic-club

"id": "mul024091825",
"linkid": "multnomah-athletic-club",
"type": "Breach",
"date": "12/2017",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '661 (Washington residents)',
                        'industry': 'Sports & Recreation',
                        'location': 'Portland, Oregon, USA',
                        'name': 'Multnomah Athletic Club',
                        'type': 'Private Club'}],
 'data_breach': {'number_of_records_exposed': '661',
                 'personally_identifiable_information': ['names',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Financial Data']},
 'date_detected': '2018-01-02',
 'date_publicly_disclosed': '2018-01-02',
 'description': "Unauthorized access to the Multnomah Athletic Club's systems, "
                'exposing personal data of 661 Washington residents, including '
                'names, Social Security numbers, and financial information.',
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 'financial information',
                                 'other personal data'],
            'identity_theft_risk': 'High (SSNs and financial data exposed)',
            'payment_information_risk': 'High'},
 'references': [{'date_accessed': '2018-01-02',
                 'source': 'Washington State Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Washington State '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Reported by Washington State Attorney '
                                        'General'},
 'title': 'Multnomah Athletic Club Data Breach (2017)',
 'type': 'Data Breach (Unauthorized Access)'}