Westlake Hardware, Inc.

Westlake Hardware, Inc. suffered a data breach between August 21, 2020, and August 30, 2020, where unauthorized actors gained access to their systems. The incident exposed sensitive personal information of 18,170 individuals, including names, addresses, and Social Security numbers one of whom was a Maine resident. The breach posed a significant risk of identity theft, prompting the company to notify affected individuals starting February 10, 2021, and offer identity theft protection services as a remedial measure. The compromised data, particularly Social Security numbers, heightens the potential for long-term financial fraud and reputational harm to those impacted. While the breach did not involve ransomware or operational disruption, the exposure of highly sensitive customer data underscores severe privacy and security failures within the organization’s systems.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/03c866fe-d2c7-489b-98a6-4a05354d1682.shtml

TPRM report: https://www.rankiteo.com/company/westlake-hardware

"id": "wes028090625",
"linkid": "westlake-hardware",
"type": "Breach",
"date": "8/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '18,170',
                        'industry': 'Hardware/Retail',
                        'name': 'Westlake Hardware, Inc.',
                        'type': 'Retail'}],
 'customer_advisories': 'Notifications sent; identity theft protection '
                        'services offered',
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': '18,170',
                 'personally_identifiable_information': ['names',
                                                         'addresses',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_publicly_disclosed': '2021-02-10',
 'description': 'The Maine Office of the Attorney General reported that '
                'Westlake Hardware, Inc. experienced a data breach involving '
                'unauthorized access to their systems from August 21, 2020, to '
                'August 30, 2020. Approximately 18,170 individuals were '
                'affected, including 1 Maine resident, with compromised '
                'information including names, addresses, and Social Security '
                'numbers. Notifications were sent out starting on February 10, '
                '2021, and identity theft protection services were offered to '
                'the affected individuals.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'Social Security numbers'],
            'identity_theft_risk': 'High (PII exposed)'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Notifications sent to affected '
                                        'individuals; identity theft '
                                        'protection services offered'},
 'title': 'Westlake Hardware, Inc. Data Breach (2020)',
 'type': 'Data Breach'}