Pandemic Response Lab

The Pandemic Response Lab suffered a data breach in which an unauthorized party gained access to a document containing personal information, including names, email addresses, and dates of birth of affected individuals. The incident was reported by the California Office of the Attorney General on June 24, 2022, with the breach potentially impacting individuals since September 6, 2021. While the exact number of affected individuals was not disclosed, the exposure of such data raises concerns over identity theft, phishing, and fraud risks. The company responded by launching an investigation and implementing enhanced privacy safeguards to prevent future incidents. The breach did not involve financial data, healthcare records, or ransomware demands, but the compromise of personally identifiable information (PII) remains a significant privacy violation, particularly given the lab’s role in pandemic-related testing and data handling.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-554585

TPRM report: https://www.rankiteo.com/company/pandemic-response-lab

"id": "pan217090125",
"linkid": "pandemic-response-lab",
"type": "Breach",
"date": "9/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare / Public Health',
                        'location': 'California, USA',
                        'name': 'Pandemic Response Lab',
                        'type': 'Organization'}],
 'data_breach': {'data_exfiltration': 'Potential',
                 'file_types_exposed': ['document'],
                 'personally_identifiable_information': ['names',
                                                         'email addresses',
                                                         'dates of birth'],
                 'sensitivity_of_data': 'Moderate',
                 'type_of_data_compromised': ['personal information']},
 'date_publicly_disclosed': '2022-06-24',
 'description': 'The California Office of the Attorney General reported that '
                'the Pandemic Response Lab experienced a data breach involving '
                'unauthorized access to a document that may have contained '
                'personal information, including names, email addresses, and '
                'dates of birth, potentially affecting individuals since '
                'September 6, 2021. Response actions included an investigation '
                'and enhancements to privacy safeguards.',
 'impact': {'data_compromised': ['names', 'email addresses', 'dates of birth'],
            'identity_theft_risk': 'Potential'},
 'investigation_status': 'Investigation conducted; enhancements implemented',
 'post_incident_analysis': {'corrective_actions': ['enhancements to privacy '
                                                   'safeguards']},
 'references': [{'date_accessed': '2022-06-24',
                 'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['California Office of '
                                                        'the Attorney '
                                                        'General']},
 'response': {'incident_response_plan_activated': True,
              'remediation_measures': ['enhancements to privacy safeguards']},
 'title': 'Pandemic Response Lab Data Breach',
 'type': 'Data Breach'}