Penquis Inc. suffered a data breach on July 7, 2024, resulting from the loss or theft of a device containing sensitive information. The incident impacted 34 individuals and 65 residents, though the exact nature of the compromised data (e.g., personal, financial, or employee records) was not explicitly detailed in the report. The breach was discovered on March 22, 2024, but notifications to affected parties were delayed until September 6, 2024, sent electronically. The incident highlights vulnerabilities in device security and timely breach response protocols, raising concerns about potential exposure of personal or confidential information. While the scale appears limited, the delay in notification may exacerbate reputational and compliance risks for the organization.
TPRM report: https://www.rankiteo.com/company/penquiscap
"id": "pen558091725",
"linkid": "penquiscap",
"type": "Breach",
"date": "3/2024",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'customers_affected': 34,
'industry': 'Social Services',
'location': 'Maine, USA',
'name': 'Penquis Inc.',
'type': 'Non-Profit Organization'}],
'customer_advisories': 'Notification sent to affected individuals on '
'2024-09-06',
'data_breach': {'number_of_records_exposed': 34},
'date_detected': '2024-03-22',
'date_publicly_disclosed': '2024-09-06',
'description': 'The Maine Office of the Attorney General reported that '
'Penquis Inc. experienced a data breach due to the loss or '
'theft of a device on July 7, 2024. A total of 34 individuals '
'were affected, including 65 residents. The breach was '
'discovered on March 22, 2024, and notification to affected '
'individuals occurred electronically on September 6, 2024.',
'impact': {'data_compromised': True},
'initial_access_broker': {'entry_point': 'Lost or stolen device'},
'post_incident_analysis': {'root_causes': 'Loss or theft of a device '
'containing sensitive data'},
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
'Attorney General'},
'response': {'communication_strategy': 'Electronic notification to affected '
'individuals'},
'title': 'Penquis Inc. Data Breach Due to Lost or Stolen Device',
'type': 'Data Breach (Lost/Stolen Device)'}