O’Brien Steel Service Co.

O’Brien Steel Service Co. experienced a cybersecurity incident between May 18, 2023, and June 1, 2023, resulting in the potential compromise of customers' personal information. The breach led to a class action lawsuit, alleging the company failed to adequately secure sensitive data. Affected individuals were notified and offered compensation, including reimbursement for expenses (up to $5,500), credit monitoring, and cash payments. The incident exposed customers to risks such as identity theft, fraud, and financial losses, with documented cases of extraordinary harm (e.g., unreimbursed losses directly tied to the breach). The settlement fund covers legal fees, administrative costs, and payouts to victims, with claims accepted until December 29, 2025. The breach underscores vulnerabilities in the company’s data protection measures, leading to reputational damage and financial liabilities.

Source: https://www.claimdepot.com/settlements/obrien-security-incident

TPRM report: https://www.rankiteo.com/company/obrien-steel-service

"id": "obr4203542110425",
"linkid": "obrien-steel-service",
"type": "Breach",
"date": "5/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Steel Manufacturing/Service',
                        'name': 'O’Brien Steel Service Co.',
                        'type': 'Company'}],
 'customer_advisories': 'Consumers who received a notice from O’Brien Steel '
                        'Service Co. about the security incident (between May '
                        '18, 2023, and June 1, 2023) are eligible to file '
                        'claims for reimbursement (up to $5,500), cash payment '
                        '($60), or credit monitoring (2 years + $1M identity '
                        'theft insurance).',
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High (Personally Identifiable '
                                        'Information)',
                 'type_of_data_compromised': ['Personal Information']},
 'description': 'O’Brien Steel Service Co. agreed to settle a class action '
                'lawsuit alleging it did not adequately secure personal '
                'information, resulting in a cybersecurity incident that '
                'occurred between May 18, 2023, and June 1, 2023. The breach '
                'potentially compromised personal information of consumers, '
                'leading to a settlement offering reimbursements, cash '
                'payments, or credit monitoring services.',
 'impact': {'brand_reputation_impact': True,
            'customer_complaints': True,
            'data_compromised': True,
            'identity_theft_risk': True,
            'legal_liabilities': True},
 'investigation_status': 'Settled via class action lawsuit; claims processing '
                         'ongoing until Dec. 29, 2025.',
 'post_incident_analysis': {'root_causes': 'Alleged failure to adequately '
                                           'secure personal information.'},
 'references': [{'source': 'Class Action Settlement Notice: O’Brien Steel '
                           'Service Co. Security Incident'},
                {'source': 'Settlement Agreement (Page 33 for claim form)'}],
 'regulatory_compliance': {'legal_actions': 'Class action lawsuit settled '
                                            '(Hayes v. O’Brien Steel Service '
                                            'Co.)'},
 'response': {'communication_strategy': 'Class action settlement notifications '
                                        'sent to affected individuals, '
                                        'offering reimbursements, cash '
                                        'payments, or credit monitoring '
                                        'services.'},
 'stakeholder_advisories': 'Notices sent to affected consumers with '
                           'instructions for filing claims (online or mail). '
                           'Settlement administrator: Atticus Administration.',
 'title': 'O’Brien Steel Service Data Breach',
 'type': 'Data Breach'}