SEK Interlocal #637

The Maine Office of the Attorney General disclosed a data breach affecting SEK Interlocal #637, occurring between May 6, 2021, and June 12, 2021. The incident stemmed from unauthorized access to an employee’s email account, compromising sensitive data, including Social Security Numbers (SSNs). A total of 1,022 individuals were impacted, with at least one resident in Maine among the victims. The breach exposed personally identifiable information (PII), raising concerns over potential identity theft, financial fraud, or misuse of the leaked data. While the exact method of infiltration (e.g., phishing, credential theft) was not specified, the focus on an employee email account suggests a targeted or opportunistic cyber intrusion. The delayed discovery (reported in October 2021, months after the breach period) further highlights vulnerabilities in monitoring and response protocols. The exposure of SSNs a high-value target for cybercriminals amplifies the long-term risks for affected individuals, including credit damage, tax fraud, or unauthorized account openings.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1da0f219-d19b-4ea3-bb5f-27409a893c25.shtml

TPRM report: https://www.rankiteo.com/company/sek-interlocal-637

"id": "sek1055090725",
"linkid": "sek-interlocal-637",
"type": "Breach",
"date": "5/2021",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 1022,
                        'name': 'SEK Interlocal #637',
                        'type': 'Organization'}],
 'attack_vector': 'Unauthorized Access (Employee Email Account)',
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': 1022,
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security Numbers']},
 'date_publicly_disclosed': '2021-10-29',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving SEK Interlocal #637 on October 29, 2021. The '
                'breach occurred between May 6, 2021, and June 12, 2021, '
                'affecting 1,022 individuals, including 1 resident in Maine. '
                'The breach was due to unauthorized access to an employee '
                'email account, and Social Security Numbers were among the '
                'compromised information.',
 'impact': {'data_compromised': ['Social Security Numbers'],
            'identity_theft_risk': 'High (SSNs compromised)',
            'systems_affected': ['Employee Email Account']},
 'initial_access_broker': {'entry_point': 'Employee Email Account'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'title': 'Data Breach at SEK Interlocal #637',
 'type': 'Data Breach'}