South Western Communications Inc.

In December 2023, South Western Communications Inc. suffered a ransomware attack that led to unauthorized access to the personal information of ~4,386 individuals, including employees and their dependents. The breach exposed sensitive data, prompting a $436,670 class-action settlement to compensate affected parties. Victims could claim reimbursements for out-of-pocket losses (up to $6,000 per person), attested time ($125 max), and three years of credit monitoring with $1M identity theft insurance. The settlement also covers legal fees (~$291,000) and administrative costs. The attack’s fallout included potential fraud, financial losses, and reputational harm, with the company denying liability but settling to avoid prolonged litigation. The incident highlights the severe consequences of ransomware on corporate data security and employee/customer trust.

Source: https://www.claimdepot.com/settlements/southwestern-data-breach

TPRM report: https://www.rankiteo.com/company/south-western-communications

"id": "sou0193001103125",
"linkid": "south-western-communications",
"type": "Ransomware",
"date": "12/2023",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': '4,386 individuals (employees '
                                              'and dependents)',
                        'industry': 'Communications',
                        'name': 'South Western Communications Inc.',
                        'type': 'Corporation'}],
 'customer_advisories': 'Eligible class members notified of claim process and '
                        'benefits (credit monitoring, reimbursements, etc.)',
 'data_breach': {'data_exfiltration': 'Likely (ransomware attack implied '
                                      'unauthorized access and potential '
                                      'exfiltration)',
                 'number_of_records_exposed': '4,386',
                 'personally_identifiable_information': 'Yes (employees and '
                                                        'dependents)',
                 'sensitivity_of_data': 'High (PII of employees and '
                                        'dependents)',
                 'type_of_data_compromised': 'Personally identifiable '
                                             'information (PII)'},
 'date_detected': 'December 2023',
 'description': 'Consumers who previously received a notice stating the South '
                'Western Communications Inc. data breach impacted their '
                'personal information in December 2023 may qualify to claim a '
                'cash payment and credit monitoring from a class action '
                'settlement. South Western Communications Inc. agreed to pay '
                '$436,670 to resolve a class action lawsuit alleging a '
                'ransomware attack in December 2023 led to unauthorized access '
                'to the personal information of thousands of individuals, '
                'including employees and their dependents.',
 'impact': {'brand_reputation_impact': 'Potential reputational damage due to '
                                       'breach and lawsuit',
            'data_compromised': 'Personally identifiable information (PII) of '
                                'employees and dependents',
            'financial_loss': '$436,670 (settlement fund)',
            'identity_theft_risk': 'High (credit monitoring and identity theft '
                                   'protection offered for 3 years)',
            'legal_liabilities': "$436,670 settlement, including attorneys' "
                                 'fees ($145,542.11), expenses ($145,556), and '
                                 'class representative award ($5,000)'},
 'initial_access_broker': {'high_value_targets': 'Employee and dependent PII'},
 'investigation_status': 'Settled (class action lawsuit resolved)',
 'post_incident_analysis': {'corrective_actions': 'Settlement agreement to '
                                                  'compensate affected '
                                                  'individuals and provide '
                                                  'credit monitoring services'},
 'ransomware': {'data_encryption': 'Likely (ransomware attack mentioned)',
                'data_exfiltration': 'Likely'},
 'references': [{'source': 'Class Action Settlement Notice'}],
 'regulatory_compliance': {'legal_actions': 'Class action lawsuit settled for '
                                            '$436,670'},
 'response': {'communication_strategy': 'Written notifications sent to '
                                        'affected individuals; class action '
                                        'settlement claims process established',
              'remediation_measures': 'Settlement agreement including credit '
                                      'monitoring and identity theft '
                                      'protection for affected individuals'},
 'stakeholder_advisories': 'Written notifications sent to affected '
                           'individuals; settlement claims process '
                           'communicated',
 'title': 'South Western Communications $436,670 Data Breach Settlement',
 'type': ['Data Breach', 'Ransomware Attack']}