Numotion

Numotion, a prominent U.S. supplier of wheelchairs and mobility equipment, has suffered a data breach affecting its entire customer base, compromising the personal information of over 494,000 individuals. Compromised data includes names, birth dates, financial details, medical data, and health insurance information, with some cases involving Social Security and driver's license numbers. The breach occurred through unauthorized email account access from September to November. Although there is no current evidence of data misuse, Numotion warns customers to monitor their accounts for fraud or identity theft risks. This breach follows a prior incident where over 600,000 individuals' data was stolen by the Black Basta ransomware gang.

Source: https://www.scworld.com/brief/almost-500k-impacted-by-numotion-breach

TPRM report: https://scoringcyber.rankiteo.com/company/numotion

"id": "num607032625",
"linkid": "numotion",
"type": "Breach",
"date": "3/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '494,000',
                        'industry': 'Healthcare/Mobility Equipment',
                        'location': 'United States',
                        'name': 'Numotion',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized email account access',
 'customer_advisories': 'Warned customers to monitor their accounts for fraud '
                        'or identity theft risks',
 'data_breach': {'number_of_records_exposed': '494,000',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Birth dates',
                                              'Financial details',
                                              'Medical data',
                                              'Health insurance information',
                                              'Social Security numbers',
                                              "Driver's license numbers"]},
 'description': 'Numotion, a prominent U.S. supplier of wheelchairs and '
                'mobility equipment, has suffered a data breach affecting its '
                'entire customer base, compromising the personal information '
                'of over 494,000 individuals. Compromised data includes names, '
                'birth dates, financial details, medical data, and health '
                'insurance information, with some cases involving Social '
                "Security and driver's license numbers. The breach occurred "
                'through unauthorized email account access from September to '
                'November. Although there is no current evidence of data '
                'misuse, Numotion warns customers to monitor their accounts '
                'for fraud or identity theft risks. This breach follows a '
                "prior incident where over 600,000 individuals' data was "
                'stolen by the Black Basta ransomware gang.',
 'impact': {'data_compromised': ['Names',
                                 'Birth dates',
                                 'Financial details',
                                 'Medical data',
                                 'Health insurance information',
                                 'Social Security numbers',
                                 "Driver's license numbers"],
            'identity_theft_risk': 'High'},
 'initial_access_broker': {'entry_point': 'Email accounts'},
 'response': {'communication_strategy': 'Warned customers to monitor their '
                                        'accounts for fraud or identity theft '
                                        'risks'},
 'title': 'Numotion Data Breach',
 'type': 'Data Breach'}