Overseas Shipholding Group, Inc.

The Maine Office of the Attorney General disclosed a data breach affecting Overseas Shipholding Group, Inc. (OSG) on December 2, 2024, stemming from an incident on August 5, 2024. The breach resulted from unauthorized access by an external actor, compromising the personal data of 217 Maine residents. The exposed information included individuals' names and Social Security numbers (SSNs), which are highly sensitive and can lead to identity theft or financial fraud. In response, OSG is offering one year of credit monitoring services via Equifax to mitigate potential harm. The breach highlights vulnerabilities in OSG’s cybersecurity defenses, raising concerns about the protection of employee and customer data against external threats. While the immediate financial or operational impact on OSG remains undisclosed, the exposure of SSNs poses long-term risks for affected individuals, including fraudulent activities and reputational damage to the company.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/30031bfc-881c-402f-b51a-36c43c49dd5c.html

TPRM report: https://www.rankiteo.com/company/osg-ship-management

"id": "osg039090625",
"linkid": "osg-ship-management",
"type": "Breach",
"date": "8/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '217',
                        'industry': 'Shipping/Transportation',
                        'location': 'United States (Maine residents affected)',
                        'name': 'Overseas Shipholding Group, Inc. (OSG)',
                        'type': 'Corporation'}],
 'attack_vector': 'Unauthorized Access',
 'customer_advisories': 'One year of credit monitoring services provided via '
                        'Equifax',
 'data_breach': {'number_of_records_exposed': '217',
                 'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2024-08-05',
 'date_publicly_disclosed': '2024-12-02',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Overseas Shipholding Group, Inc. (OSG) on '
                'December 2, 2024. The breach occurred on August 5, 2024, due '
                'to unauthorized access by an external actor, affecting 217 '
                "Maine residents. The breached data included individuals' "
                'names and Social Security numbers, and OSG is providing one '
                'year of credit monitoring services through Equifax.',
 'impact': {'data_compromised': ['Names', 'Social Security Numbers'],
            'identity_theft_risk': 'High (PII exposed)'},
 'references': [{'date_accessed': '2024-12-02',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Public disclosure via Maine Attorney '
                                        'General',
              'third_party_assistance': 'Equifax (credit monitoring services)'},
 'threat_actor': 'External Actor',
 'title': 'Overseas Shipholding Group, Inc. (OSG) Data Breach',
 'type': 'Data Breach'}