Marines' Memorial Association & Foundation

The Marines' Memorial Association & Foundation experienced a ransomware cyberattack between February 7, 2020, and May 20, 2020, reported by the Washington State Office of the Attorney General on April 6, 2021. The breach compromised highly sensitive personal and financial data of 2,625 Washington residents, including names, Social Security numbers, financial records, dates of birth, military IDs, health insurance details, medical data, and biometric information. The attack exposed critical personal, financial, and health-related data, posing severe risks such as identity theft, financial fraud, and potential misuse of military and biometric records. The involvement of ransomware suggests that attackers may have encrypted and exfiltrated data, demanding payment for decryption or to prevent further exposure. The breadth of compromised information spanning financial, medical, and biometric data indicates a high-severity incident with long-term repercussions for affected individuals, including potential fraud, blackmail, or operational disruptions for the organization. The breach underscores significant vulnerabilities in data protection, particularly for an entity handling military-affiliated and highly sensitive records.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=10438

TPRM report: https://www.rankiteo.com/company/usmc-memorial-foundation

"id": "usm134082125",
"linkid": "usmc-memorial-foundation",
"type": "Ransomware",
"date": "2/2020",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 2625,
                        'industry': 'Veterans Services / Hospitality',
                        'location': 'Washington, USA',
                        'name': "Marines' Memorial Association & Foundation",
                        'type': 'Non-profit Organization'}],
 'data_breach': {'number_of_records_exposed': 2625,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Financial Data',
                                              'Health Information',
                                              'Biometric Data',
                                              'Military Information']},
 'date_publicly_disclosed': '2021-04-06',
 'description': 'The Washington State Office of the Attorney General reported '
                "a data breach involving Marines' Memorial Association & "
                'Foundation due to a ransomware cyberattack. The breach '
                'occurred between February 7, 2020, and May 20, 2020, '
                'affecting 2,625 Washington residents. Compromised data '
                'included names, Social Security numbers, financial data, '
                'dates of birth, military IDs, health insurance information, '
                'medical data, and biometric data.',
 'impact': {'data_compromised': ['Names',
                                 'Social Security numbers',
                                 'Financial data',
                                 'Dates of birth',
                                 'Military IDs',
                                 'Health insurance information',
                                 'Medical data',
                                 'Biometric data'],
            'identity_theft_risk': 'High (PII and sensitive data exposed)',
            'payment_information_risk': 'High (Financial data exposed)'},
 'ransomware': {'data_encryption': True},
 'references': [{'date_accessed': '2021-04-06',
                 'source': 'Washington State Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Washington State '
                                                       'Office of the Attorney '
                                                       'General'},
 'response': {'communication_strategy': 'Public disclosure via Washington '
                                        'State Office of the Attorney General'},
 'title': "Marines' Memorial Association & Foundation Data Breach (2020)",
 'type': 'Data Breach (Ransomware)'}