Shoes For Crews

On March 1, 2022, the Maine Office of the Attorney General disclosed that Shoes For Crews suffered a data breach after unauthorized actors gained access to its network on February 1, 2022. The incident exposed sensitive personal information, including driver’s license numbers, affecting 942 individuals. While the exact method of intrusion remains undisclosed, the breach underscores vulnerabilities in the company’s cybersecurity defenses, leading to potential risks of identity theft or fraud for the impacted customers. Notifications were issued to affected parties on February 28, 2022, nearly a month after the initial compromise. The breach highlights the critical need for robust data protection measures, particularly for organizations handling personally identifiable information (PII). No evidence suggests the data was misused, but the exposure of government-issued IDs elevates the severity due to the heightened risk of financial or reputational harm to those affected.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ef33db54-f2bc-45f4-bf66-a4ab92a2158a.shtml

TPRM report: https://www.rankiteo.com/company/shoes-for-crews

"id": "sho549091725",
"linkid": "shoes-for-crews",
"type": "Breach",
"date": "2/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 942,
                        'industry': 'Retail (Footwear)',
                        'name': 'Shoes For Crews',
                        'type': 'Company'}],
 'customer_advisories': 'Notification provided on 2022-02-28',
 'data_breach': {'number_of_records_exposed': 942,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High (Personally Identifiable '
                                        'Information)',
                 'type_of_data_compromised': ["Driver's license numbers"]},
 'date_detected': '2022-02-01',
 'date_publicly_disclosed': '2022-03-01',
 'description': 'On March 1, 2022, the Maine Office of the Attorney General '
                'reported that Shoes For Crews experienced a data breach '
                'involving unauthorized access to their network on February 1, '
                '2022. The breach potentially affected 942 individuals, with '
                "driver's license numbers being one type of information "
                'compromised. Consumer notification was provided on February '
                '28, 2022.',
 'impact': {'data_compromised': ["Driver's license numbers"],
            'identity_theft_risk': "Potential (due to driver's license "
                                   'numbers)'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Consumer notification provided on '
                                        '2022-02-28'},
 'title': 'Shoes For Crews Data Breach - February 2022',
 'type': 'Data Breach'}