The California Office of the Attorney General disclosed a data breach affecting Allocation Services, Inc. dba IMPAXX on November 8, 2024, stemming from an incident on February 28, 2024. The breach involved a former employee who improperly retained personal information of individuals after leaving the company. While the exact number of affected individuals and the specific types of compromised data (e.g., financial records, identification details, or employment records) remain undisclosed, the incident highlights a critical insider threat scenario. The unauthorized retention of data by a former employee poses risks such as potential misuse for fraud, identity theft, or further exposure if the information is sold or leaked. The company’s failure to prevent or detect the unauthorized data retention raises concerns about internal access controls, offboarding procedures, and data governance policies. Given the involvement of a former employee, the breach underscores vulnerabilities in post-employment data handling and the need for stricter monitoring of privileged access even after termination.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-594588
TPRM report: https://www.rankiteo.com/company/the-allocation-company-inc.
"id": "the930082125",
"linkid": "the-allocation-company-inc.",
"type": "Breach",
"date": "2/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 'Unknown',
'name': 'Allocation Services, Inc. dba IMPAXX',
'type': 'Company'}],
'data_breach': {'number_of_records_exposed': 'Unknown',
'type_of_data_compromised': 'Personal Information '
'(unspecified)'},
'date_detected': '2024-02-28',
'date_publicly_disclosed': '2024-11-08',
'description': 'The California Office of the Attorney General reported a data '
'breach involving Allocation Services, Inc. dba IMPAXX on '
'November 8, 2024. The breach occurred on February 28, 2024, '
'when a former employee retained certain personal information. '
'The number of individuals affected is currently unknown, and '
'specific types of information compromised were not specified.',
'impact': {'data_compromised': 'Personal Information (unspecified)'},
'references': [{'date_accessed': '2024-11-08',
'source': 'California Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'California Office of '
'the Attorney General'},
'threat_actor': 'Former Employee',
'title': 'Data Breach at Allocation Services, Inc. dba IMPAXX',
'type': 'Data Breach'}