Oregon Academy of General Dentistry

On March 1, 2023, the Vermont Office of the Attorney General disclosed a data breach affecting the Oregon Academy of General Dentistry (OAGD). The incident occurred between October 17, 2022, and October 31, 2022, when an unauthorized actor gained access to an employee’s email account. The breach exposed personal information, including names and potentially other sensitive details of individuals associated with the organization. The exact number of affected individuals remains undetermined, but the exposure of employee-related data suggests a compromise of internal communications and stored records. The breach was likely facilitated through phishing or credential theft, a common vector for email account takeovers. While the full scope of the leaked data is unclear, the incident highlights vulnerabilities in employee account security and the risks of third-party access to sensitive professional networks. No evidence suggests ransomware or large-scale customer data theft, but the exposure of employee-related personal information poses reputational and compliance risks for the OAGD.

Source: https://ago.vermont.gov/document/2023-03-01-oregon-academy-general-dentistry-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/oregonacademyofgeneraldentistry

"id": "ore1017090725",
"linkid": "oregonacademyofgeneraldentistry",
"type": "Breach",
"date": "10/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Healthcare (Dental Education)',
                        'location': 'Oregon, USA',
                        'name': 'Oregon Academy of General Dentistry (OAGD)',
                        'type': 'Non-Profit Organization'}],
 'attack_vector': 'Compromised Email Account',
 'data_breach': {'data_exfiltration': 'Potential',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'Moderate (Personal Information)',
                 'type_of_data_compromised': ['Names',
                                              'Other Personal Information']},
 'date_publicly_disclosed': '2023-03-01',
 'description': 'On March 1, 2023, the Vermont Office of the Attorney General '
                'reported a data breach involving the Oregon Academy of '
                'General Dentistry (OAGD). The breach occurred between October '
                '17, 2022, and October 31, 2022, when an unknown actor '
                "accessed an employee's email account, potentially exposing "
                'names and other personal information. The number of '
                'individuals affected is currently unknown.',
 'impact': {'data_compromised': ['Names', 'Other Personal Information'],
            'identity_theft_risk': 'Potential',
            'systems_affected': ['Employee Email Account']},
 'initial_access_broker': {'entry_point': 'Employee Email Account'},
 'investigation_status': 'Ongoing (Number of affected individuals unknown)',
 'references': [{'date_accessed': '2023-03-01',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Vermont Office of the '
                                                        'Attorney General']},
 'threat_actor': 'Unknown',
 'title': 'Oregon Academy of General Dentistry (OAGD) Email Account Data '
          'Breach',
 'type': 'Data Breach'}