Teachers’ Retirement System of the City of New York

The Maine Office of the Attorney General reported on July 24, 2023, that the Teachers’ Retirement System of the City of New York experienced a data breach affecting 93,298 payees due to unauthorized access via a vulnerability in the MOVEit Transfer application on May 29-30, 2023. The breach exposed individuals' names and Social Security numbers, with identity theft protection services being offered for 24 months through Kroll.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/77cce108-255b-4315-94d7-ca00c2169c7e.shtml

TPRM report: https://www.rankiteo.com/company/trsnyc

"id": "trs643072525",
"linkid": "trsnyc",
"type": "Breach",
"date": "5/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 93298,
                        'industry': 'Education',
                        'location': 'New York, NY',
                        'name': 'Teachers’ Retirement System of the City of '
                                'New York',
                        'type': 'Government'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 93298,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers']},
 'date_detected': '2023-05-29',
 'date_publicly_disclosed': '2023-07-24',
 'description': 'The Maine Office of the Attorney General reported on July 24, '
                '2023, that the Teachers’ Retirement System of the City of New '
                'York experienced a data breach affecting 93,298 payees due to '
                'unauthorized access via a vulnerability in the MOVEit '
                'Transfer application on May 29-30, 2023. The breach exposed '
                "individuals' names and Social Security numbers, with identity "
                'theft protection services being offered for 24 months through '
                'Kroll.',
 'impact': {'data_compromised': ['Names', 'Social Security numbers'],
            'identity_theft_risk': 'High'},
 'references': [{'date_accessed': '2023-07-24',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'third_party_assistance': 'Kroll'},
 'title': 'Data Breach at Teachers’ Retirement System of the City of New York',
 'type': 'Data Breach',
 'vulnerability_exploited': 'MOVEit Transfer application vulnerability'}