Renewal by Andersen LLC

The Maine Office of the Attorney General reported a data breach involving Renewal by Andersen LLC on May 12, 2023. The breach occurred on January 19, 2023, due to unauthorized access to a system that was unsecured from January 2018 to January 19, 2023, potentially affecting the personal information of 195 Maine residents, including names, Social Security numbers, and banking information. Identity theft protection services were offered to the affected individuals, including 24 months of credit monitoring.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/93cc29d2-0f45-4599-8888-83ec5ce73b3c.shtml

TPRM report: https://www.rankiteo.com/company/renewal-by-andersen

"id": "ren343072725",
"linkid": "renewal-by-andersen",
"type": "Breach",
"date": "1/2018",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 195,
                        'industry': 'Home Improvement',
                        'name': 'Renewal by Andersen LLC',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 195,
                 'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers',
                                              'Banking information']},
 'date_detected': '2023-01-19',
 'date_publicly_disclosed': '2023-05-12',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Renewal by Andersen LLC on May 12, 2023. The '
                'breach occurred on January 19, 2023, due to unauthorized '
                'access to a system that was unsecured from January 2018 to '
                'January 19, 2023, potentially affecting the personal '
                'information of 195 Maine residents, including names, Social '
                'Security numbers, and banking information. Identity theft '
                'protection services were offered to the affected individuals, '
                'including 24 months of credit monitoring.',
 'impact': {'data_compromised': ['Names',
                                 'Social Security numbers',
                                 'Banking information'],
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High'},
 'post_incident_analysis': {'root_causes': 'Unsecured System'},
 'references': [{'date_accessed': '2023-05-12',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'remediation_measures': ['Identity theft protection services',
                                       '24 months of credit monitoring']},
 'title': 'Data Breach at Renewal by Andersen LLC',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unsecured System'}