Veris Wealth Partners

The Maine Office of the Attorney General disclosed on April 23, 2021, that Veris Wealth Partners suffered a data breach due to unauthorized access to an employee’s email account. The incident occurred between December 30, 2020, and February 3, 2021, compromising sensitive information of 365 individuals, including 13 Maine residents. The exposed data included names, addresses, and financial account details, raising risks of identity theft and financial fraud. In response, the company offered identity theft protection services to affected individuals to mitigate potential harm. The breach stemmed from a targeted attack on an employee’s credentials, highlighting vulnerabilities in email security protocols and the broader threat of credential-based intrusions in financial services firms.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/95c53c91-5ff0-4df1-abf2-d11ef78cc6e8.shtml

TPRM report: https://www.rankiteo.com/company/veris-wealth-partners

"id": "ver022091825",
"linkid": "veris-wealth-partners",
"type": "Breach",
"date": "12/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 365,
                        'industry': 'Wealth Management',
                        'name': 'Veris Wealth Partners',
                        'type': 'Financial Services'}],
 'attack_vector': 'Unauthorized Access (Email Account Compromise)',
 'customer_advisories': 'Identity theft protection services offered to '
                        'affected individuals',
 'data_breach': {'number_of_records_exposed': 365,
                 'personally_identifiable_information': ['Names', 'Addresses'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Identifiable '
                                              'Information (PII)',
                                              'Financial Data']},
 'date_publicly_disclosed': '2021-04-23',
 'description': 'The Maine Office of the Attorney General reported that Veris '
                'Wealth Partners experienced a data breach involving '
                "unauthorized access to an employee's email account. The "
                'breach occurred between December 30, 2020, and February 3, '
                '2021, affecting 365 individuals, including 13 residents of '
                'Maine. Compromised information includes names, addresses, and '
                'financial account information. Identity theft protection '
                'services were offered to affected individuals.',
 'impact': {'data_compromised': ['Names',
                                 'Addresses',
                                 'Financial Account Information'],
            'identity_theft_risk': 'High (Identity theft protection services '
                                   'offered)',
            'payment_information_risk': 'Yes (Financial account information '
                                        'compromised)',
            'systems_affected': ['Employee Email Account']},
 'initial_access_broker': {'entry_point': 'Employee Email Account'},
 'references': [{'date_accessed': '2021-04-23',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'recovery_measures': 'Identity theft protection services offered '
                                   'to affected individuals'},
 'title': 'Veris Wealth Partners Email Account Data Breach',
 'type': 'Data Breach'}