Purdy Insurance Agency

The Maine Office of the Attorney General reported a data breach involving Purdy Insurance Agency on August 5, 2022. The breach occurred between November 15, 2021, and November 18, 2021, due to unauthorized access via a phishing email, affecting a total of 554 individuals, with one Maine resident potentially impacted. Compromised information included names and driver's license numbers.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/34080644-f3c8-421f-9a82-31cd667370e3.shtml

TPRM report: https://www.rankiteo.com/company/purdy-insurance-agency-inc

"id": "pur108072825",
"linkid": "purdy-insurance-agency-inc",
"type": "Breach",
"date": "11/2021",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 554,
                        'industry': 'Insurance',
                        'name': 'Purdy Insurance Agency',
                        'type': 'Insurance Agency'}],
 'attack_vector': 'Phishing Email',
 'data_breach': {'number_of_records_exposed': 554,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              "Driver's License Numbers"]},
 'date_detected': '2022-08-05',
 'date_publicly_disclosed': '2022-08-05',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Purdy Insurance Agency on August 5, 2022. '
                'The breach occurred between November 15, 2021, and November '
                '18, 2021, due to unauthorized access via a phishing email, '
                'affecting a total of 554 individuals, with one Maine resident '
                'potentially impacted. Compromised information included names '
                "and driver's license numbers.",
 'impact': {'data_compromised': ['Names', "Driver's License Numbers"]},
 'initial_access_broker': {'entry_point': 'Phishing Email'},
 'post_incident_analysis': {'root_causes': 'Unauthorized Access via Phishing '
                                           'Email'},
 'references': [{'date_accessed': '2022-08-05',
                 'source': 'Maine Office of the Attorney General'}],
 'title': 'Data Breach at Purdy Insurance Agency',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized Access'}