Westat, Inc.

The Maine Office of the Attorney General reported that Westat, Inc. experienced a data breach due to unauthorized access to the MOVEit Transfer server, with the breach occurring between May 28 and May 29, 2023. Approximately 65 Maine residents were affected, with potential exposure of personal information including names, dates of birth, and Social Security numbers. Written notification to affected individuals was provided on July 21, 2023, along with the offering of 12 months of credit monitoring services.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5f2fb11a-3b55-4a52-aa09-d50b7a996691.shtml

TPRM report: https://www.rankiteo.com/company/westat

"id": "wes749072725",
"linkid": "westat",
"type": "Breach",
"date": "5/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 65,
                        'name': 'Westat, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'customer_advisories': 'Written notification to affected individuals',
 'data_breach': {'number_of_records_exposed': 65,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'dates of birth',
                                              'Social Security numbers']},
 'date_detected': '2023-05-28',
 'date_publicly_disclosed': '2023-07-21',
 'description': 'The Maine Office of the Attorney General reported that '
                'Westat, Inc. experienced a data breach due to unauthorized '
                'access to the MOVEit Transfer server, with the breach '
                'occurring between May 28 and May 29, 2023. Approximately 65 '
                'Maine residents were affected, with potential exposure of '
                'personal information including names, dates of birth, and '
                'Social Security numbers. Written notification to affected '
                'individuals was provided on July 21, 2023, along with the '
                'offering of 12 months of credit monitoring services.',
 'impact': {'data_compromised': ['names',
                                 'dates of birth',
                                 'Social Security numbers'],
            'systems_affected': ['MOVEit Transfer server']},
 'initial_access_broker': {'entry_point': 'MOVEit Transfer server'},
 'references': [{'date_accessed': '2023-07-21',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'communication_strategy': 'Written notification to affected '
                                        'individuals'},
 'title': 'Westat, Inc. Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'MOVEit Transfer server'}