Octagon, Inc.

The Maine Office of the Attorney General disclosed a data breach affecting Octagon, Inc. between September 5, 2024, and September 16, 2024, with notification issued on January 21, 2025. The incident compromised the personal information of 54 individuals, including at least one Maine resident. The exposed data included names and an unspecified variable field, which could encompass sensitive details like contact information, financial records, or identifiers. While the exact nature of the breach (e.g., phishing, system vulnerability, or third-party intrusion) was not detailed, the exposure of personal data even without explicit confirmation of theft poses risks such as identity fraud, targeted scams, or reputational harm to the affected individuals. The limited scope (54 individuals) suggests a contained but still consequential event, particularly if the unspecified field contained high-value information. No evidence of ransomware or large-scale operational disruption was reported.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9a41f995-e45e-4a00-b124-e868ddc67acc.html

TPRM report: https://www.rankiteo.com/company/octagonits

"id": "oct1017090725",
"linkid": "octagonits",
"type": "Breach",
"date": "9/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 54,
                        'name': 'Octagon, Inc.',
                        'type': 'Organization'}],
 'data_breach': {'number_of_records_exposed': 54,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'Moderate (includes names and '
                                        'unspecified variable data)',
                 'type_of_data_compromised': ['Personal Information (PII)']},
 'date_publicly_disclosed': '2025-01-21',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Octagon, Inc. The breach occurred between '
                'September 5, 2024, and September 16, 2024, affecting a total '
                'of 54 individuals, including 1 resident of Maine. Personal '
                'information involved included names and an unspecified '
                'variable data field.',
 'impact': {'data_compromised': ['names', 'unspecified variable data field'],
            'identity_theft_risk': 'Potential (PII exposed)'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'title': 'Data Breach at Octagon, Inc.',
 'type': 'Data Breach'}