Schylling Inc.

Schylling Inc. suffered a data breach due to unauthorized external system access (hacking) between June 4, 2021, and September 1, 2021, compromising sensitive personal information. The incident impacted 72 individuals, including at least one Maine resident. The exposed data included names and Social Security numbers (SSNs), which are highly sensitive identifiers that can facilitate identity theft, financial fraud, or other malicious activities. In response, the company offered 12 months of complimentary credit monitoring services to affected individuals as a mitigating measure. The breach highlights vulnerabilities in Schylling Inc.’s cybersecurity defenses, particularly against external intrusion attempts targeting personally identifiable information (PII). While the scale of the breach was relatively small, the nature of the exposed data—SSNs—poses significant long-term risks to the victims, including potential fraud, credit damage, and reputational harm to the company.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ccd90862-e837-46b9-a4da-478ddc15c4a4.shtml

TPRM report: https://www.rankiteo.com/company/schylling-associates

"id": "sch032091825",
"linkid": "schylling-associates",
"type": "Breach",
"date": "6/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 72,
                        'name': 'Schylling Inc.',
                        'type': 'Corporation'}],
 'attack_vector': 'External System Access (Hacking)',
 'customer_advisories': 'Complimentary credit monitoring services offered (12 '
                        'months)',
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': 72,
                 'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High (SSNs included)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_resolved': '2021-09-01',
 'description': 'The Maine Office of the Attorney General reported that '
                'Schylling Inc. experienced a data breach involving external '
                'system access (hacking) from June 4, 2021, to September 1, '
                '2021. The breach exposed names and Social Security numbers of '
                '72 individuals, including 1 Maine resident. Complimentary '
                'credit monitoring services were offered for twelve months.',
 'impact': {'data_compromised': ['Names', 'Social Security Numbers'],
            'identity_theft_risk': 'High (SSNs exposed)'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'recovery_measures': 'Complimentary credit monitoring services '
                                   '(12 months)'},
 'title': 'Schylling Inc. Data Breach (2021)',
 'type': 'Data Breach'}