Treeways Holdings, LLC

Treeways Holdings LLC suffered a data breach due to unauthorized access to an employee's email account between February 6, 2023, and February 24, 2023. The incident exposed the personal information of two Maine residents, specifically their names and Social Security Numbers (SSNs). While the breach was limited in scope, the exposure of SSNs poses a significant risk of identity theft or financial fraud. The company responded by notifying the affected individuals on June 16, 2023, and offered 12 months of free credit monitoring via Experian as a remedial measure. The breach highlights vulnerabilities in email security protocols, particularly concerning employee accounts with access to sensitive data. Though the number of impacted individuals was minimal, the nature of the compromised data (SSNs) elevates the potential long-term consequences for those affected.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6882cce2-b555-4cbe-8de5-789435247bf4.shtml

TPRM report: https://www.rankiteo.com/company/treeways-inc

"id": "tre311091825",
"linkid": "treeways-inc",
"type": "Breach",
"date": "2/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 2,
                        'name': 'Treeways Holdings LLC',
                        'type': 'Private Company'}],
 'attack_vector': 'Compromised Email Account',
 'customer_advisories': 'Written notice provided to affected individuals (June '
                        '16, 2023) with offer of 12 months of complimentary '
                        'credit monitoring via Experian.',
 'data_breach': {'number_of_records_exposed': 2,
                 'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High (SSNs included)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_publicly_disclosed': '2023-06-16',
 'description': "The Maine Attorney General's Office reported that Treeways "
                'Holdings LLC experienced a data breach involving unauthorized '
                "access to an employee's email account between February 6, "
                '2023, and February 24, 2023. The breach potentially affected '
                'the personal information of two Maine residents, including '
                'names and Social Security Numbers. Treeways provided written '
                'notice to the affected individuals on or about June 16, 2023, '
                'and is offering 12 months of complimentary credit monitoring '
                'services through Experian.',
 'impact': {'data_compromised': ['Names', 'Social Security Numbers'],
            'identity_theft_risk': 'High (SSNs exposed)',
            'systems_affected': ['Employee Email Account']},
 'initial_access_broker': {'entry_point': 'Employee Email Account'},
 'references': [{'source': "Maine Attorney General's Office"}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Attorney '
                                                        "General's Office"]},
 'response': {'communication_strategy': 'Written notice to affected '
                                        'individuals (June 16, 2023)',
              'third_party_assistance': ['Experian (Credit Monitoring '
                                         'Services)']},
 'title': 'Treeways Holdings LLC Email Account Data Breach (2023)',
 'type': 'Data Breach (Unauthorized Email Access)'}