Student Transportation of America, Inc.

The Maine Office of the Attorney General reported a data breach involving Student Transportation of America on August 8, 2024. The breach, discovered on January 24, 2024, involved unauthorized access to employee email accounts, potentially affecting 5,016 individuals, including information related to names and Social Security numbers. Identity theft protection services were offered for 12 months through CyberScout.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/989d2557-57b9-4d62-b318-db93d3fbb1b3.html

TPRM report: https://www.rankiteo.com/company/student-transportation-sta

"id": "stu207072725",
"linkid": "student-transportation-sta",
"type": "Breach",
"date": "1/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 5016,
                        'industry': 'Transportation',
                        'name': 'Student Transportation of America',
                        'type': 'Company'}],
 'attack_vector': 'Email Account Compromise',
 'data_breach': {'number_of_records_exposed': 5016,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers']},
 'date_detected': '2024-01-24',
 'date_publicly_disclosed': '2024-08-08',
 'description': 'Unauthorized access to employee email accounts, potentially '
                'affecting 5,016 individuals, including information related to '
                'names and Social Security numbers.',
 'impact': {'data_compromised': ['Names', 'Social Security numbers'],
            'identity_theft_risk': 'High'},
 'references': [{'date_accessed': '2024-08-08',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'third_party_assistance': 'CyberScout'},
 'title': 'Data Breach at Student Transportation of America',
 'type': 'Data Breach'}