An employee of South Carolina-based software company Spartan Technology had uploaded a number of backups to the AWS S3 storage service.
Four backups of the MSSQL database, each weighing about 14 gigabytes, were included in the data collection.
5.2 million arrests, criminal suspects, alleged victims, and witnesses are all included in the data.
The database had over 17,000 distinct social security numbers in addition to full names, birthdates, phone numbers, and license numbers.
Source: https://www.upguard.com/breaches/spartan-south-carolina-arrest-records-data-exposure
TPRM report: https://scoringcyber.rankiteo.com/company/spartan-technologies
"id": "spa1458523",
"linkid": "spartan-technologies",
"type": "Data Leak",
"date": "12/2019",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Technology',
'location': 'South Carolina',
'name': 'Spartan Technology',
'type': 'Software Company'}],
'attack_vector': 'Misconfiguration',
'data_breach': {'file_types_exposed': ['MSSQL database backups'],
'number_of_records_exposed': ['5.2 million records',
'17,000 social security '
'numbers'],
'personally_identifiable_information': ['Full names',
'Birthdates',
'Phone numbers',
'License numbers',
'Social security '
'numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information']},
'description': 'An employee of South Carolina-based software company Spartan '
'Technology had uploaded a number of backups to the AWS S3 '
'storage service. Four backups of the MSSQL database, each '
'weighing about 14 gigabytes, were included in the data '
'collection. 5.2 million arrests, criminal suspects, alleged '
'victims, and witnesses are all included in the data. The '
'database had over 17,000 distinct social security numbers in '
'addition to full names, birthdates, phone numbers, and '
'license numbers.',
'impact': {'data_compromised': ['Full names',
'Birthdates',
'Phone numbers',
'License numbers',
'Social security numbers'],
'systems_affected': ['AWS S3 storage', 'MSSQL database']},
'threat_actor': 'Employee',
'title': 'Data Breach at Spartan Technology',
'type': 'Data Breach',
'vulnerability_exploited': 'Improperly configured AWS S3 storage'}