On October 14, 2022, the Vermont Office of the Attorney General disclosed a data breach affecting TruHome, a company that experienced unauthorized network access between April 27, 2022, and May 3, 2022. The incident involved the potential exposure of individuals' full names and certain personally identifiable information (PII), though the exact number of affected individuals remains undisclosed. The breach suggests that sensitive customer data was compromised, raising concerns about identity theft, fraud, or misuse of personal details. While the full scope of the attack such as whether financial records, login credentials, or other high-risk data were accessed was not specified, the exposure of PII alone poses significant risks to affected individuals. The incident highlights vulnerabilities in TruHome’s cybersecurity defenses, particularly in detecting and preventing prolonged unauthorized access. No ransomware demands or immediate financial losses were reported, but the leak of personal customer information aligns with patterns seen in targeted cyber intrusions aimed at harvesting sensitive data for malicious purposes.
Source: https://ago.vermont.gov/document/2022-10-14-truhome-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/truhome-solutions-llc
"id": "tru008091825",
"linkid": "truhome-solutions-llc",
"type": "Breach",
"date": "4/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 'Unknown',
'name': 'TruHome',
'type': 'Organization'}],
'data_breach': {'number_of_records_exposed': 'Unknown',
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Full names',
'Personally Identifiable '
'Information (PII)']},
'date_publicly_disclosed': '2022-10-14',
'description': 'On October 14, 2022, the Vermont Office of the Attorney '
'General reported a data breach involving TruHome. '
'Unauthorized access to the network occurred between April 27, '
'2022, and May 3, 2022. The breach potentially involved '
"individuals' full names and certain personally identifiable "
'information (PII), but the exact number of individuals '
'affected is unknown.',
'impact': {'data_compromised': ['Full names',
'Personally Identifiable Information (PII)'],
'identity_theft_risk': 'Potential'},
'references': [{'source': 'Vermont Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Vermont Office of the '
'Attorney General']},
'title': 'TruHome Data Breach (2022)',
'type': 'Data Breach'}