Rumpke Waste & Recycling

On December 10, 2024, the Vermont Office of the Attorney General reported a data breach at Rumpke Consolidated Companies. The breach, which began on July 20, 2024, involved unauthorized access to employee information through a compromised user account. The affected information includes personal data such as names, addresses, dates of birth, Social Security numbers, and health insurance data.

Source: https://ago.vermont.gov/document/2024-12-10-rumpke-consolidated-companies-data-breach-notice-consumers

TPRM report: https://scoringcyber.rankiteo.com/company/rumpke

"id": "rum224072525",
"linkid": "rumpke",
"type": "Breach",
"date": "7/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'name': 'Rumpke Consolidated Companies',
                        'type': 'Company'}],
 'attack_vector': 'Compromised User Account',
 'data_breach': {'personally_identifiable_information': ['names',
                                                         'addresses',
                                                         'dates of birth',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['personal data',
                                              'health insurance data']},
 'date_detected': '2024-12-10',
 'date_publicly_disclosed': '2024-12-10',
 'description': 'Unauthorized access to employee information through a '
                'compromised user account.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'dates of birth',
                                 'Social Security numbers',
                                 'health insurance data']},
 'references': [{'date_accessed': '2024-12-10',
                 'source': 'Vermont Office of the Attorney General'}],
 'title': 'Data Breach at Rumpke Consolidated Companies',
 'type': 'Data Breach'}