Paragon Benefits

An employee of Paragon Benefits Inc. required stole and sent is personal Gmail account the personal information from more than 5,200 TSYS employees.

Paragon Benefits, a company which administers health benefits for credit-card and payment processor TSYS in Columbus and Kelley Manufacturing Co. in Tifton, Ga.

The files that were accessed in the incident included two files, one from TSYS and another from Kelley Manufacturing,and information included the employees names, dates of birth, Social Security numbers, home addresses and insurance plan details.

Source: https://www.databreaches.net/man-charged-in-tsys-identity-theft-violated-computer-policy-at-paragon-benefits/

TPRM report: https://scoringcyber.rankiteo.com/company/paragon-benefits

"id": "par180131222",
"linkid": "paragon-benefits",
"type": "Data Leak",
"date": "10/2013",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Health Benefits Administration',
                        'name': 'Paragon Benefits Inc.',
                        'type': 'Company'},
                       {'customers_affected': 5200,
                        'industry': 'Credit-card and Payment Processing',
                        'location': 'Columbus',
                        'name': 'TSYS',
                        'type': 'Company'},
                       {'industry': 'Manufacturing',
                        'location': 'Tifton, Ga',
                        'name': 'Kelley Manufacturing Co.',
                        'type': 'Company'}],
 'attack_vector': 'Insider Threat',
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': 5200,
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'dates of birth',
                                              'Social Security numbers',
                                              'home addresses',
                                              'insurance plan details']},
 'description': 'An employee of Paragon Benefits Inc. stole and sent personal '
                'information from more than 5,200 TSYS employees to their '
                'personal Gmail account. The files accessed included two '
                'files, one from TSYS and another from Kelley Manufacturing, '
                "containing employees' names, dates of birth, Social Security "
                'numbers, home addresses, and insurance plan details.',
 'impact': {'data_compromised': ['names',
                                 'dates of birth',
                                 'Social Security numbers',
                                 'home addresses',
                                 'insurance plan details'],
            'identity_theft_risk': 'High'},
 'motivation': 'Unknown',
 'threat_actor': 'Malicious Insider',
 'title': 'Data Breach at Paragon Benefits Inc.',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Human Error/Insider Threat'}