Noritsu America Corporation

On April 29, 2024, Noritsu America Corporation suffered a data breach caused by unauthorized external access to its systems. The incident, reported by the Maine Office of the Attorney General on August 7, 2024, exposed the personal information of 651 individuals, including names and Social Security numbers highly sensitive data that significantly elevates the risk of identity theft and fraud. While the breach did not involve ransomware or a large-scale operational disruption, the compromise of such critical personal identifiers necessitates serious concern. In response, the company offered identity theft protection services to affected individuals, acknowledging the potential long-term repercussions for those impacted. The breach underscores vulnerabilities in Noritsu America’s cybersecurity defenses, particularly in safeguarding personally identifiable information (PII) from external threats. The exposure of Social Security numbers, a prime target for cybercriminals, amplifies the severity, as this data can be exploited for financial fraud, loan applications, or other malicious activities under the victims’ identities.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/533cafa7-4032-4bce-9d94-e9ab8979e53a.html

TPRM report: https://www.rankiteo.com/company/noritsu-america-corporation

"id": "nor1001091725",
"linkid": "noritsu-america-corporation",
"type": "Breach",
"date": "4/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 651,
                        'name': 'Noritsu America Corporation',
                        'type': 'Corporation'}],
 'attack_vector': 'Unauthorized External Access',
 'customer_advisories': 'Identity theft protection services offered to '
                        'affected individuals',
 'data_breach': {'number_of_records_exposed': 651,
                 'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High (Social Security Numbers)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2024-04-29',
 'date_publicly_disclosed': '2024-08-07',
 'description': 'The Maine Office of the Attorney General reported that '
                'Noritsu America Corporation experienced a data breach on '
                'April 29, 2024, which may have involved the personal '
                'information of 651 individuals, including names and social '
                'security numbers. The breach resulted from unauthorized '
                "external access to the company's systems. Identity theft "
                'protection services were offered to affected individuals.',
 'impact': {'data_compromised': ['Names', 'Social Security Numbers'],
            'identity_theft_risk': 'High (Identity theft protection services '
                                   'offered)'},
 'references': [{'date_accessed': '2024-08-07',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'recovery_measures': 'Identity theft protection services offered '
                                   'to affected individuals'},
 'title': 'Noritsu America Corporation Data Breach (2024)',
 'type': 'Data Breach'}