Savage and Associates, Inc.

The Maine Office of the Attorney General reported that Savage and Associates, Inc. experienced a data breach on May 28, 2021, affecting 7,036 individuals. The breach involved an external hacking incident that encrypted some of the company's systems, potentially exposing client names, addresses, Social Security numbers, and financial account information. Identity theft protection services through Kroll were offered for twelve months.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ff30e567-0505-42cb-a687-cf4e0bd12d35.shtml

TPRM report: https://www.rankiteo.com/company/savage-and-associates

"id": "sav110072525",
"linkid": "savage-and-associates",
"type": "Ransomware",
"date": "5/2021",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 7036,
                        'name': 'Savage and Associates, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'External Hacking',
 'data_breach': {'number_of_records_exposed': 7036,
                 'personally_identifiable_information': ['Client names',
                                                         'Addresses',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Client names',
                                              'Addresses',
                                              'Social Security numbers',
                                              'Financial account information']},
 'date_detected': '2021-05-28',
 'description': 'The Maine Office of the Attorney General reported that Savage '
                'and Associates, Inc. experienced a data breach on May 28, '
                '2021, affecting 7,036 individuals. The breach involved an '
                'external hacking incident that encrypted some of the '
                "company's systems, potentially exposing client names, "
                'addresses, Social Security numbers, and financial account '
                'information. Identity theft protection services through Kroll '
                'were offered for twelve months.',
 'impact': {'data_compromised': ['Client names',
                                 'Addresses',
                                 'Social Security numbers',
                                 'Financial account information'],
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'response': {'third_party_assistance': 'Kroll'},
 'title': 'Savage and Associates, Inc. Data Breach',
 'type': 'Data Breach'}