Service by Medallion, Inc.

The California Office of the Attorney General reported that Service by Medallion, Inc. experienced a data breach on August 16, 2022. The breach involved unauthorized access to employee email accounts from August 21, 2021, to January 16, 2022, potentially compromising individuals' names and social security numbers. The number of affected individuals is currently unknown.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-556313

TPRM report: https://www.rankiteo.com/company/service-by-medallion

"id": "ser538080425",
"linkid": "service-by-medallion",
"type": "Breach",
"date": "8/2021",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'name': 'Service by Medallion, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Email Account Compromise',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security Numbers']},
 'date_detected': '2022-08-16',
 'description': 'Unauthorized access to employee email accounts potentially '
                "compromising individuals' names and social security numbers.",
 'impact': {'data_compromised': ['Names', 'Social Security Numbers']},
 'initial_access_broker': {'entry_point': 'Email Accounts'},
 'references': [{'source': 'California Office of the Attorney General'}],
 'title': 'Service by Medallion, Inc. Data Breach',
 'type': 'Data Breach'}