Water For People

The Vermont Office of the Attorney General disclosed that Water For People suffered a data breach on or around December 15, 2023, with public notification issued on September 5, 2024. The incident involved the potential exposure of personal information, including individuals' first and last names, along with unspecified additional data elements. While the exact nature of the compromised data remains undisclosed, the breach raises concerns over unauthorized access to sensitive personal details. The number of affected individuals is unknown, leaving the full scope of the impact undetermined. The delay between the breach occurrence and public disclosure (nearly nine months) further highlights potential risks in incident response timelines. No evidence suggests financial fraud, ransomware involvement, or systemic operational disruption, but the exposure of personally identifiable information (PII) poses reputational and privacy risks for the affected parties.

Source: https://ago.vermont.gov/document/2024-09-05-water-people-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/water-for-people

"id": "wat041091825",
"linkid": "water-for-people",
"type": "Breach",
"date": "12/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Unknown',
                        'industry': 'Water and Sanitation',
                        'location': 'Vermont, USA',
                        'name': 'Water For People',
                        'type': 'Non-profit Organization'}],
 'data_breach': {'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': ['First names',
                                                         'Last names'],
                 'sensitivity_of_data': 'Moderate (PII)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2023-12-15',
 'date_publicly_disclosed': '2024-09-05',
 'description': 'The Vermont Office of the Attorney General reported that '
                'Water For People experienced a data breach on or around '
                'December 15, 2023, with the breach reported to the public on '
                'September 5, 2024. The breach potentially exposed personal '
                'information including first and last names along with '
                'unspecified data elements, but the number of individuals '
                'affected is unknown.',
 'impact': {'data_compromised': ['First names',
                                 'Last names',
                                 'Unspecified data elements'],
            'identity_theft_risk': 'Potential'},
 'references': [{'date_accessed': '2024-09-05',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Reported to Vermont '
                                                       'Office of the Attorney '
                                                       'General'},
 'response': {'communication_strategy': 'Public disclosure via Vermont Office '
                                        'of the Attorney General'},
 'title': 'Water For People Data Breach (December 2023)',
 'type': 'Data Breach'}