An insurance agent’s login credentials of Pekin Insurance were stolen that allowed an unauthorized party to access the company’s insurance agent website and view sensitive consumer data.
The incident compromised the name, address, driver’s license number and date of birth of more than 10,872 individuals.
The insurance company immediately terminated the stolen user credentials and worked to investigated the extent of the breach and sent notifications to the impacted individuals.
Source: https://www.jdsupra.com/legalnews/data-breach-alert-pekin-insurance-9272622/
TPRM report: https://scoringcyber.rankiteo.com/company/pekin-insurance
"id": "pek14429522",
"linkid": "pekin-insurance",
"type": "Breach",
"date": "02/2022",
"severity": "90",
"impact": "5",
"explanation": "Attack threatening the organization's existence"
{'affected_entities': [{'customers_affected': '10,872 individuals',
'industry': 'Insurance',
'name': 'Pekin Insurance',
'type': 'Insurance Company'}],
'attack_vector': 'Stolen Credentials',
'data_breach': {'number_of_records_exposed': '10,872',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Name',
'Address',
"Driver's License Number",
'Date of Birth']},
'description': 'An insurance agent’s login credentials of Pekin Insurance '
'were stolen that allowed an unauthorized party to access the '
'company’s insurance agent website and view sensitive consumer '
'data.',
'impact': {'data_compromised': ['Name',
'Address',
"Driver's License Number",
'Date of Birth'],
'systems_affected': ['Insurance Agent Website']},
'response': {'containment_measures': ['Terminated stolen user credentials'],
'recovery_measures': ['Sent notifications to impacted '
'individuals'],
'remediation_measures': ['Investigated extent of the breach']},
'threat_actor': 'Unauthorized Party',
'title': 'Pekin Insurance Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Weak or Stolen Login Credentials'}