The Maine Office of the Attorney General disclosed a data breach affecting Tavistock Corporation, which occurred on April 6, 2022, due to external system hacking. The incident compromised the personal data of 13,239 individuals, including 9 Maine residents, with unauthorized access to Social Security Numbers (SSNs)—a highly sensitive form of personally identifiable information (PII). The breach was reported on October 3, 2022, indicating a delayed public disclosure. SSNs are critical identifiers often exploited for identity theft, financial fraud, or phishing attacks, posing long-term risks to affected individuals. The scale of the breach (over 13,000 records) and the nature of the exposed data (SSNs) suggest severe reputational damage for Tavistock Corporation, potential regulatory scrutiny, and financial liabilities, including class-action lawsuits or fines under data protection laws like Maine’s breach notification statute or federal regulations. The attack vector (external hacking) implies a failure in cybersecurity defenses, further eroding trust among customers, partners, and employees.
TPRM report: https://www.rankiteo.com/company/tavistock-group
"id": "tav038090625",
"linkid": "tavistock-group",
"type": "Breach",
"date": "4/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 13239,
'name': 'Tavistock Corporation',
'type': 'Corporation'}],
'attack_vector': 'External System Hacking',
'data_breach': {'number_of_records_exposed': 13239,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security Numbers']},
'date_detected': '2022-04-06',
'date_publicly_disclosed': '2022-10-03',
'description': 'The Maine Office of the Attorney General reported a data '
'breach involving Tavistock Corporation on October 3, 2022. '
'The breach occurred on April 6, 2022, through external system '
'hacking, affecting a total of 13,239 individuals, including 9 '
'residents of Maine, with unauthorized access to Social '
'Security Numbers.',
'impact': {'data_compromised': ['Social Security Numbers'],
'identity_theft_risk': 'High (SSNs exposed)'},
'references': [{'date_accessed': '2022-10-03',
'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
'Attorney General']},
'title': 'Tavistock Corporation Data Breach (2022)',
'type': 'Data Breach'}