People for People

The Washington State Attorney General reported a data breach involving People for People (PFP) on March 17, 2017. The breach, which occurred on October 20, 2016, involved unauthorized access to an employee's email account, affecting the personal information of 821 Washington residents, including names, Social Security numbers, driver's license numbers, financial information, dates of birth, and medical information.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=9688

TPRM report: https://www.rankiteo.com/company/people-for-people-inc

"id": "peo313072625",
"linkid": "people-for-people-inc",
"type": "Breach",
"date": "10/2016",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 821,
                        'industry': 'Social Services',
                        'location': 'Washington',
                        'name': 'People for People',
                        'type': 'Non-profit Organization'}],
 'attack_vector': 'Email Account Compromise',
 'data_breach': {'number_of_records_exposed': 821,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers',
                                              "Driver's license numbers",
                                              'Financial information',
                                              'Dates of birth',
                                              'Medical information']},
 'date_detected': '2017-03-17',
 'date_publicly_disclosed': '2017-03-17',
 'description': "Unauthorized access to an employee's email account "
                'compromised personal information of 821 Washington residents.',
 'impact': {'data_compromised': ['Names',
                                 'Social Security numbers',
                                 "Driver's license numbers",
                                 'Financial information',
                                 'Dates of birth',
                                 'Medical information']},
 'initial_access_broker': {'entry_point': 'Email Account'},
 'references': [{'date_accessed': '2017-03-17',
                 'source': 'Washington State Attorney General'}],
 'title': 'Data Breach at People for People',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized Access'}