On July 23, 2024, Blue Ridge Rural Water Company, Inc. suffered a data breach due to unauthorized access to its corporate network. The incident resulted in the exposure of sensitive personal information belonging to one Maine resident, specifically their name and Social Security number (SSN). The breach involved the unauthorized viewing and acquisition of files containing this data, posing a risk of identity theft or fraud. In response, the company has offered the affected individual one year of complimentary credit monitoring and identity protection services through CyEx Identity Defense Total to mitigate potential harm. The breach highlights vulnerabilities in the company’s network security, raising concerns about the protection of customer data. While the scale of the breach appears limited to a single individual, the exposure of an SSN critical for financial and identity verification elevates the severity of the incident.
TPRM report: https://www.rankiteo.com/company/southeast-rural-community-assistance-project-inc.
"id": "sou408090725",
"linkid": "southeast-rural-community-assistance-project-inc.",
"type": "Breach",
"date": "7/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 1,
'industry': 'Utilities (Water Supply)',
'location': 'Maine, USA (affecting at least one '
'resident)',
'name': 'Blue Ridge Rural Water Company, Inc.',
'type': 'Private Company'}],
'customer_advisories': 'One year of complimentary credit monitoring and '
'identity protection services offered to the affected '
'individual',
'data_breach': {'data_exfiltration': 'Yes (unauthorized obtaining of files)',
'number_of_records_exposed': 1,
'personally_identifiable_information': ['Name',
'Social Security '
'Number'],
'sensitivity_of_data': 'High (includes SSN)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)']},
'date_detected': '2024-07-23',
'description': 'The Maine Office of the Attorney General reported that Blue '
'Ridge Rural Water Company, Inc. experienced a data breach on '
'July 23, 2024, due to unauthorized access to its corporate '
'network, affecting one Maine resident. The breach involved '
'the unauthorized viewing and obtaining of files containing '
"the resident's name and Social Security number. Blue Ridge "
'has offered the affected individual one year of complimentary '
'credit monitoring and identity protection services through '
'CyEx Identity Defense Total.',
'impact': {'data_compromised': ['Name', 'Social Security Number'],
'identity_theft_risk': 'High (SSN exposed)',
'systems_affected': ['Corporate Network']},
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
'Attorney General']},
'response': {'communication_strategy': 'Offered complimentary credit '
'monitoring and identity protection '
'services to the affected individual',
'third_party_assistance': ['CyEx Identity Defense Total (credit '
'monitoring services)']},
'title': 'Blue Ridge Rural Water Company, Inc. Data Breach',
'type': 'Data Breach'}