United Services Automobile Association

The Maine Office of the Attorney General reported a data breach incident involving the United Services Automobile Association (USAA) on August 28, 2024. The breach, which occurred on April 30, 2024, involved an internal system error that potentially exposed personal information for 32,276 individuals, including 156 residents of Maine. Identity theft protection services were offered in the form of a 24-month membership to Experian's IdentityWorks program.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/225913a2-7f23-4a54-9ce8-40dbfce9f0be.html

TPRM report: https://www.rankiteo.com/company/usaa

"id": "usa444072625",
"linkid": "usaa",
"type": "Breach",
"date": "4/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 32276,
                        'industry': 'Insurance',
                        'name': 'United Services Automobile Association (USAA)',
                        'type': 'Financial Services'}],
 'attack_vector': 'Internal System Error',
 'data_breach': {'number_of_records_exposed': 32276,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Personal Information'},
 'date_detected': '2024-04-30',
 'date_publicly_disclosed': '2024-08-28',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach incident involving the United Services Automobile '
                'Association (USAA) on August 28, 2024. The breach, which '
                'occurred on April 30, 2024, involved an internal system error '
                'that potentially exposed personal information for 32,276 '
                'individuals, including 156 residents of Maine. Identity theft '
                'protection services were offered in the form of a 24-month '
                "membership to Experian's IdentityWorks program.",
 'impact': {'data_compromised': 'Personal Information',
            'identity_theft_risk': 'High'},
 'references': [{'date_accessed': '2024-08-28',
                 'source': 'Maine Office of the Attorney General'}],
 'title': 'USAA Data Breach',
 'type': 'Data Breach'}