The Maine Office of the Attorney General reported that Wellesley Asset Management, Inc. experienced a data breach involving unauthorized access to an employee's email account on May 20, 2024. The breach potentially affected the personal information of 1,920 individuals, including social security numbers and financial account details. Identity theft protection services from Experian were offered for a period of 24 months.
TPRM report: https://www.rankiteo.com/company/wellesley-asset-management
"id": "wel213080425",
"linkid": "wellesley-asset-management",
"type": "Breach",
"date": "3/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 1920,
'industry': 'Financial Services',
'name': 'Wellesley Asset Management, Inc.',
'type': 'Company'}],
'attack_vector': 'Email Account Compromise',
'data_breach': {'number_of_records_exposed': 1920,
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security Numbers',
'Financial Account Details']},
'date_detected': '2024-05-20',
'description': "Unauthorized access to an employee's email account "
'potentially affecting the personal information of 1,920 '
'individuals.',
'impact': {'data_compromised': ['Social Security Numbers',
'Financial Account Details'],
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'initial_access_broker': {'entry_point': 'Email Account'},
'references': [{'source': 'Maine Office of the Attorney General'}],
'response': {'third_party_assistance': ['Experian']},
'title': 'Wellesley Asset Management Data Breach',
'type': 'Data Breach'}