Muscatine Power and Water

The Vermont Office of the Attorney General reported a data breach involving Muscatine Power and Water (MPW) on March 1, 2024. The breach occurred on or about January 26, 2024, when an unauthorized party gained access to the corporate network, potentially exposing customer names, Social Security Numbers, and customer proprietary network information related to telephone service. Approximately 2 residents of Rhode Island may be impacted by this incident.

Source: https://ago.vermont.gov/document/2024-03-01-muscatine-power-and-water-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/muscatine-power-and-water

"id": "mus210072825",
"linkid": "muscatine-power-and-water",
"type": "Breach",
"date": "1/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 2,
                        'industry': 'Energy and Utilities',
                        'location': 'Muscatine, Iowa',
                        'name': 'Muscatine Power and Water',
                        'type': 'Utility Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 2,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Customer Names',
                                              'Social Security Numbers',
                                              'Customer Proprietary Network '
                                              'Information']},
 'date_detected': '2024-01-26',
 'date_publicly_disclosed': '2024-03-01',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving Muscatine Power and Water (MPW) on March 1, '
                '2024. The breach occurred on or about January 26, 2024, when '
                'an unauthorized party gained access to the corporate network, '
                'potentially exposing customer names, Social Security Numbers, '
                'and customer proprietary network information related to '
                'telephone service. Approximately 2 residents of Rhode Island '
                'may be impacted by this incident.',
 'impact': {'data_compromised': ['Customer Names',
                                 'Social Security Numbers',
                                 'Customer Proprietary Network Information']},
 'references': [{'date_accessed': '2024-03-01',
                 'source': 'Vermont Office of the Attorney General'}],
 'threat_actor': 'Unauthorized Party',
 'title': 'Data Breach at Muscatine Power and Water',
 'type': 'Data Breach'}