S. Lichtenberg & Co., Inc.

On August 30, 2024, S. Lichtenberg & Co., Inc. suffered a data breach exposing sensitive personal information of 440 individuals, including at least one Maine resident. The compromised data included full names and Social Security numbers (SSNs), which are high-value targets for identity theft and financial fraud. In response, the company offered affected individuals 12 months of credit monitoring and identity theft protection services through Experian to mitigate potential risks. The breach poses significant threats to the victims, as SSNs can be exploited for unauthorized credit applications, tax fraud, or medical identity theft. While the company took remedial steps, the exposure of such critical data underscores vulnerabilities in their data protection measures. The incident highlights the broader risks of personal information leaks, which can lead to long-term financial and reputational harm for the affected individuals. No ransomware or broader systemic disruption was reported, but the breach’s focus on customer PII (Personally Identifiable Information) aligns with patterns seen in targeted cyber intrusions aimed at harvesting valuable data for malicious use.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e9aede1b-8678-472a-bc38-f52224e932ce.html

TPRM report: https://www.rankiteo.com/company/s-lichtenberg-co-inc

"id": "s-l726090125",
"linkid": "s-lichtenberg-co-inc",
"type": "Breach",
"date": "8/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 440,
                        'name': 'S. Lichtenberg & Co., Inc.',
                        'type': 'Company'}],
 'customer_advisories': 'Identity theft protection services (12 months of '
                        'credit monitoring via Experian) offered to affected '
                        'individuals',
 'data_breach': {'number_of_records_exposed': 440,
                 'personally_identifiable_information': ['First names',
                                                         'Last names',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High (includes SSNs)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2024-08-30',
 'description': 'The Maine Office of the Attorney General reported that S. '
                'Lichtenberg & Co., Inc. experienced a data breach on August '
                '30, 2024, affecting a total of 440 individuals, including 1 '
                'resident of Maine. The compromised information included the '
                'first and last names along with Social Security numbers of '
                'those affected. Identity theft protection services, including '
                '12 months of credit monitoring provided by Experian, were '
                'offered to the affected individuals.',
 'impact': {'data_compromised': ['First names',
                                 'Last names',
                                 'Social Security numbers'],
            'identity_theft_risk': 'High (SSNs compromised)'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'communication_strategy': 'Offered identity theft protection '
                                        'services (12 months of credit '
                                        'monitoring via Experian) to affected '
                                        'individuals',
              'third_party_assistance': ['Experian (credit monitoring)']},
 'title': 'Data Breach at S. Lichtenberg & Co., Inc.',
 'type': 'Data Breach'}