Spring Mill Partners, LLC

The Maine Office of the Attorney General reported on October 6, 2021, that Spring Mill Partners, LLC experienced a data breach due to unauthorized access to an employee email account, affecting 750 individuals with compromised Social Security Numbers. The breach occurred between December 17 and December 18, 2020, and was discovered on September 10, 2021, leading to the offer of a 12-month membership in Experian IdentityWorks Credit 3B as a precaution.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0b76239c-8f80-4fb7-964f-1fe39ef2738b.shtml

TPRM report: https://www.rankiteo.com/company/spring-mill-venture-partners

"id": "spr301072625",
"linkid": "spring-mill-venture-partners",
"type": "Breach",
"date": "12/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 750,
                        'name': 'Spring Mill Partners, LLC',
                        'type': 'Company'}],
 'attack_vector': 'Email Compromise',
 'data_breach': {'number_of_records_exposed': 750,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security Numbers']},
 'date_detected': '2021-09-10',
 'date_publicly_disclosed': '2021-10-06',
 'description': 'Unauthorized access to an employee email account compromised '
                'Social Security Numbers of 750 individuals.',
 'impact': {'data_compromised': ['Social Security Numbers']},
 'initial_access_broker': {'entry_point': 'Email Account'},
 'references': [{'date_accessed': '2021-10-06',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'remediation_measures': ['Offered 12-month membership in '
                                       'Experian IdentityWorks Credit 3B']},
 'title': 'Spring Mill Partners, LLC Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized Access'}