Ultralife Corporation

On January 25, 2023, Ultralife Corporation suffered a data breach due to unauthorized access to its computer network. The incident exposed the personal information of 1,007 individuals, including the names and Social Security numbers of at least 2 Maine residents. While the breach was detected, the company took over two months to notify affected individuals, sending letters on March 24, 2023, along with an offer for identity theft protection services via Equifax. The compromised data primarily Social Security numbers poses a significant risk of identity theft, financial fraud, and long-term reputational harm to the affected individuals. Although the breach did not involve ransomware or a large-scale customer data leak, the exposure of sensitive personally identifiable information (PII) suggests a targeted attack with potential for severe consequences. The delayed notification further exacerbates the risk, as affected parties remained unprotected during the interim period. The breach underscores vulnerabilities in Ultralife Corporation’s cybersecurity defenses, particularly in safeguarding high-value employee and customer data. While the company took remedial steps post-incident, the breach’s impact on trust and regulatory compliance remains a concern.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bf3718da-86a5-4c22-8ece-9f34cf87a301.shtml

TPRM report: https://www.rankiteo.com/company/ultralife-corporation

"id": "ult948091725",
"linkid": "ultralife-corporation",
"type": "Breach",
"date": "1/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '1,007 individuals (2 confirmed '
                                              'Maine residents)',
                        'name': 'Ultralife Corporation',
                        'type': 'Corporation'}],
 'customer_advisories': 'Notification letters with offer of identity theft '
                        'protection (Equifax)',
 'data_breach': {'number_of_records_exposed': '1,007',
                 'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High (includes SSNs)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2023-01-25',
 'description': 'The Maine Office of the Attorney General reported that '
                'Ultralife Corporation experienced a data breach on January '
                '25, 2023, involving unauthorized access to its computer '
                'network. The breach potentially affected the personal '
                'information of 1,007 individuals, specifically including the '
                'names and Social Security numbers of 2 Maine residents. '
                'Notification letters were mailed to the affected residents on '
                'March 24, 2023, and identity theft protection services '
                'through Equifax were offered.',
 'impact': {'data_compromised': ['Names', 'Social Security numbers'],
            'identity_theft_risk': 'High (SSNs exposed)',
            'systems_affected': ['Computer network']},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'communication_strategy': 'Notification letters mailed to '
                                        'affected residents (2023-03-24)',
              'third_party_assistance': ['Equifax (identity theft protection '
                                         'services)']},
 'title': 'Ultralife Corporation Data Breach (January 2023)',
 'type': 'Data Breach'}