The Maine Office of the Attorney General reported that Sanford Insurance Services Group, LLC experienced a data breach involving unauthorized access to employee email accounts between March 24, 2022, and May 18, 2022. The breach affected 2 Maine residents, with compromised data including names and driver's license numbers. Notification letters were sent on August 24, 2022, offering a year of complimentary credit monitoring through Experian.
TPRM report: https://www.rankiteo.com/company/sanford-insurance-group-llc
"id": "san017072625",
"linkid": "sanford-insurance-group-llc",
"type": "Breach",
"date": "3/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 2,
'industry': 'Insurance',
'location': 'Maine',
'name': 'Sanford Insurance Services Group, LLC',
'type': 'Company'}],
'attack_vector': 'Email Compromise',
'data_breach': {'number_of_records_exposed': 2,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
"Driver's License Numbers"]},
'date_detected': '2022-05-18',
'date_publicly_disclosed': '2022-08-24',
'description': 'Unauthorized access to employee email accounts resulting in '
'the compromise of personal information of 2 Maine residents.',
'impact': {'data_compromised': ['Names', "Driver's License Numbers"]},
'initial_access_broker': {'entry_point': 'Email Compromise'},
'references': [{'date_accessed': '2022-08-24',
'source': 'Maine Office of the Attorney General'}],
'response': {'communication_strategy': 'Notification letters sent to affected '
'individuals offering a year of '
'complimentary credit monitoring '
'through Experian'},
'title': 'Sanford Insurance Services Group Data Breach',
'type': 'Data Breach'}