The Maine Office of the Attorney General disclosed a data breach affecting New England Life Care, Inc. (NELC) on August 31, 2023, after unauthorized access to its IT network was detected on July 25, 2023. The breach occurred between May 23 and May 24, 2023, compromising sensitive data, including Social Security numbers (SSNs) of some vendors. While the incident impacted 13 individuals (with three being Maine residents), the exposure of SSNs poses a significant risk of identity theft and financial fraud.NELC has responded by offering one year of identity theft protection services through Experian to affected parties. The breach highlights vulnerabilities in the company’s network security, raising concerns about the protection of personally identifiable information (PII). Although the scale of the breach is relatively small in terms of affected individuals, the nature of the exposed data (SSNs) elevates the potential for long-term harm, including fraudulent activities targeting vendors or associated entities. The incident underscores the need for stronger cybersecurity measures to prevent unauthorized network access and safeguard sensitive information.
TPRM report: https://www.rankiteo.com/company/new-england-life-care
"id": "new1011082125",
"linkid": "new-england-life-care",
"type": "Breach",
"date": "5/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': '13 individuals (3 Maine '
'residents)',
'industry': 'Healthcare',
'location': 'Maine, USA (and possibly other states)',
'name': 'New England Life Care, Inc. (NELC)',
'type': 'Healthcare Provider'}],
'customer_advisories': ['Identity theft protection services (Experian) '
'offered to affected individuals'],
'data_breach': {'number_of_records_exposed': '13',
'personally_identifiable_information': ['Social Security '
'numbers'],
'sensitivity_of_data': 'High (Social Security numbers)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)']},
'date_detected': '2023-07-25',
'date_publicly_disclosed': '2023-08-31',
'description': 'The Maine Office of the Attorney General reported a data '
'breach involving New England Life Care, Inc. (NELC) on August '
'31, 2023. The breach, discovered on July 25, 2023, involved '
"unauthorized access to the company's IT network between May "
'23 and May 24, 2023, potentially affecting 13 individuals, '
'three of whom are Maine residents. Information compromised '
'included the Social Security numbers of some vendors, and '
'NELC is providing one year of identity theft protection '
'services through Experian.',
'impact': {'data_compromised': ['Social Security numbers (vendors)'],
'identity_theft_risk': 'High (SSNs exposed)',
'systems_affected': ['IT network']},
'investigation_status': 'Disclosed; remediation ongoing (identity protection '
'services offered)',
'post_incident_analysis': {'corrective_actions': ['Providing identity theft '
'protection to affected '
'individuals']},
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
'Attorney General']},
'response': {'communication_strategy': ['Notification to Maine Attorney '
'General',
'Offer of identity theft protection '
'to affected individuals'],
'third_party_assistance': ['Experian (identity theft protection '
'services)']},
'title': 'Data Breach at New England Life Care, Inc. (NELC)',
'type': 'Data Breach'}