On October 23, 2020, US Claims Capital, LLC experienced a data breach when an unauthorized third party accessed employee email accounts. The incident, reported to the Maine Office of the Attorney General on February 5, 2021, exposed the personal information of 6 Maine residents, specifically their Social Security numbers (SSNs). However, the breach impacted a total of 5,679 individuals across a broader scope. While the exact nature of the compromised data for the remaining victims was not detailed, the exposure of SSNs poses a significant risk of identity theft and financial fraud. In response, the company offered 24 months of identity theft protection services through Kroll to affected individuals. The breach highlights vulnerabilities in email security protocols, potentially stemming from phishing, weak credentials, or insufficient multi-factor authentication (MFA). The incident underscores the critical need for robust cybersecurity measures to safeguard sensitive employee and customer data from unauthorized access.
TPRM report: https://www.rankiteo.com/company/us-claims
"id": "us-031091825",
"linkid": "us-claims",
"type": "Breach",
"date": "10/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': '5,679',
'name': 'US Claims Capital, LLC',
'type': 'Company'},
{'industry': 'Legal/Regulatory',
'location': 'Maine, USA',
'name': 'Maine Office of the Attorney General',
'type': 'Government'}],
'attack_vector': 'Unauthorized access to employee email accounts',
'customer_advisories': ['Offered 24 months of identity theft protection '
'services through Kroll'],
'data_breach': {'number_of_records_exposed': '5,679',
'personally_identifiable_information': 'Yes (Social Security '
'numbers)',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal information',
'Social Security numbers']},
'date_detected': '2020-10-23',
'date_publicly_disclosed': '2021-02-05',
'description': 'The Maine Office of the Attorney General reported a data '
'breach incident involving US Claims Capital, LLC on February '
'5, 2021. The breach occurred on October 23, 2020, when an '
'unauthorized third party gained access to employee email '
'accounts, potentially affecting the personal information of 6 '
'Maine residents, specifically their Social Security numbers. '
'A total of 5,679 individuals were affected, and US Claims '
'offered 24 months of identity theft protection services '
'through Kroll to those impacted.',
'impact': {'data_compromised': ['Social Security numbers'],
'identity_theft_risk': 'High (Social Security numbers exposed)',
'systems_affected': ['Employee email accounts']},
'initial_access_broker': {'entry_point': 'Employee email accounts'},
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
'Attorney General']},
'response': {'recovery_measures': ['Offered 24 months of identity theft '
'protection services to affected '
'individuals'],
'third_party_assistance': ['Kroll (identity theft protection '
'services)']},
'threat_actor': 'Unauthorized third party',
'title': 'Data Breach at US Claims Capital, LLC',
'type': 'Data Breach'}