Puma Biotechnology, Inc.

Puma Biotechnology, Inc. suffered a data breach due to unauthorized access to its systems, first detected on June 19, 2022. The incident exposed sensitive personal and financial information of 1,933 individuals, including 3 Maine residents. Compromised data included names, Social Security numbers, and financial account details, heightening the risk of identity theft and financial fraud. The company responded by issuing written notifications to affected individuals on May 17, 2023, nearly a year after the breach, and offered 12 months of identity theft protection services via Equifax to mitigate potential harm. The delay in disclosure and the nature of the exposed data—particularly financial and personally identifiable information (PII)—suggest significant operational and reputational consequences for the company, as well as long-term risks for the impacted individuals, including potential fraud, credit damage, and misuse of sensitive records.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a193b9d8-f0ad-4f3b-952c-db1f3d322f39.shtml

TPRM report: https://www.rankiteo.com/company/puma-biotechnology-ltd

"id": "pum143082125",
"linkid": "puma-biotechnology-ltd",
"type": "Breach",
"date": "4/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 1933,
                        'industry': 'Biotechnology/Pharmaceuticals',
                        'name': 'Puma Biotechnology, Inc.',
                        'type': 'Corporation'}],
 'customer_advisories': 'Written notifications sent (May 17, 2023) with offer '
                        'of 12 months of identity theft protection via Equifax',
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': 1933,
                 'personally_identifiable_information': ['names',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Financial Information']},
 'date_publicly_disclosed': '2023-05-17',
 'description': 'The Maine Office of the Attorney General reported that Puma '
                'Biotechnology, Inc. experienced a data breach involving '
                'unauthorized access to its systems from June 19, 2022. The '
                'breach potentially affected 1,933 individuals, including 3 '
                'Maine residents. The compromised information included names, '
                'Social Security numbers, and financial account information. '
                'Written notifications were sent to affected individuals on '
                'May 17, 2023, and identity theft protection services were '
                'offered for twelve months through Equifax.',
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 'financial account information'],
            'identity_theft_risk': 'High (PII and financial data exposed)',
            'payment_information_risk': 'Yes (financial account information '
                                        'compromised)'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Written notifications to affected '
                                        'individuals (May 17, 2023)',
              'third_party_assistance': 'Equifax (identity theft protection '
                                        'services)'},
 'title': 'Puma Biotechnology, Inc. Data Breach (2022)',
 'type': 'Data Breach'}