Quebe Holdings, Inc.

On November 17, 2020, the Maine Office of the Attorney General disclosed a data breach affecting **Quebe Holdings, Inc.**, stemming from an external system compromise discovered on October 16, 2020. The incident exposed **Social Security numbers (SSNs) of certain employees**, impacting **4,302 individuals**, including three Maine residents. While the breach did not involve customer data, the exposure of SSNs—highly sensitive personally identifiable information (PII)—poses significant risks, including identity theft and financial fraud. In response, Quebe Holdings is providing **24 months of identity theft protection services through Kroll** to mitigate potential harm. The breach highlights vulnerabilities in external systems, raising concerns about third-party security controls and the protection of employee data. The compromised SSNs could enable long-term fraudulent activities, underscoring the severity of internal data leaks within corporate environments.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9d83f878-b472-4204-96fd-f35acc0e5c0f.shtml

TPRM report: https://www.rankiteo.com/company/quebe-holdings-inc.

"id": "que006090625",
"linkid": "quebe-holdings-inc.",
"type": "Breach",
"date": "10/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': '4,302 individuals (including 3 '
                                              'Maine residents)',
                        'name': 'Quebe Holdings, Inc.',
                        'type': 'Corporation'}],
 'attack_vector': 'External System Breach',
 'customer_advisories': ['24 months of identity theft protection services '
                         'offered to affected individuals'],
 'data_breach': {'number_of_records_exposed': '4,302',
                 'personally_identifiable_information': ['Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security numbers']},
 'date_detected': '2020-10-16',
 'date_publicly_disclosed': '2020-11-17',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Quebe Holdings, Inc. on November 17, 2020. '
                'The breach, discovered on October 16, 2020, was due to an '
                'external system breach that may have compromised the Social '
                'Security numbers of certain employees, affecting three Maine '
                'residents, with a total of 4,302 individuals impacted. Quebe '
                'Holdings is offering 24 months of identity theft protection '
                'services via Kroll.',
 'impact': {'data_compromised': ['Social Security numbers'],
            'identity_theft_risk': 'High (Social Security numbers exposed)'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'recovery_measures': ['24 months of identity theft protection '
                                    'services for affected individuals'],
              'third_party_assistance': ['Kroll (identity theft protection '
                                         'services)']},
 'title': 'Quebe Holdings, Inc. Data Breach (2020)',
 'type': 'Data Breach'}