CWT Travel Holdings, Inc.

The Vermont Office of the Attorney General reported on September 22, 2023, that CWT Travel Holdings, Inc. experienced a data breach due to vulnerabilities in the MOVEit Transfer tool, leading to unauthorized access between May 28, 2023 and May 29, 2023. The breach potentially exposed personal information, including names, but specific details regarding the number of affected individuals are unknown.

Source: https://ago.vermont.gov/document/2023-09-22-cwt-travel-progress-software-moveit-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/mycwt

"id": "myc928072525",
"linkid": "mycwt",
"type": "Vulnerability",
"date": "5/2023",
"severity": "25",
"impact": "1",
"explanation": "Attack without any consequences"

{'affected_entities': [{'industry': 'Travel',
                        'name': 'CWT Travel Holdings, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Vulnerability Exploitation',
 'data_breach': {'personally_identifiable_information': ['Names'],
                 'type_of_data_compromised': ['Personal Information']},
 'date_detected': '2023-09-22',
 'date_publicly_disclosed': '2023-09-22',
 'description': 'The Vermont Office of the Attorney General reported on '
                'September 22, 2023, that CWT Travel Holdings, Inc. '
                'experienced a data breach due to vulnerabilities in the '
                'MOVEit Transfer tool, leading to unauthorized access between '
                'May 28, 2023 and May 29, 2023. The breach potentially exposed '
                'personal information, including names, but specific details '
                'regarding the number of affected individuals are unknown.',
 'impact': {'data_compromised': ['Names']},
 'references': [{'date_accessed': '2023-09-22',
                 'source': 'Vermont Office of the Attorney General'}],
 'title': 'CWT Travel Holdings, Inc. Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'MOVEit Transfer tool vulnerabilities'}