Wharf Resources (U.S.A.), Inc.

On June 30, 2023, Wharf Resources (U.S.A.), Inc. experienced a data breach due to unauthorized access to an email account, potentially exposing personal information of individuals. While the exact scope of compromised data was not fully disclosed, it was confirmed that names and other unspecified details may have been affected. The breach did not specify whether financial records, sensitive identifiers (e.g., Social Security numbers), or other high-risk data were exposed. However, the company acknowledged the incident by offering complimentary identity protection services to impacted individuals, suggesting a focus on mitigating risks related to identity theft or fraud. The breach was publicly reported on August 9, 2023, indicating a delay between discovery and disclosure. The nature of the attack targeting an email account implies a likely phishing or credential-compromise scenario, though no ransomware or large-scale system disruption was mentioned. The response emphasizes reputational and financial safeguards rather than operational recovery, aligning with a breach primarily affecting customer or employee personal data.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a33cc98f-a307-4284-b6dd-c6594370eb8d.shtml

TPRM report: https://www.rankiteo.com/company/wharf-resources-plc

"id": "wha006090625",
"linkid": "wharf-resources-plc",
"type": "Breach",
"date": "6/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'location': 'United States',
                        'name': 'Wharf Resources (U.S.A.), Inc.',
                        'type': 'Corporation'}],
 'attack_vector': 'Unauthorized Email Access',
 'customer_advisories': 'Complimentary identity protection services offered to '
                        'affected individuals',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'Moderate to High (personal '
                                        'information)',
                 'type_of_data_compromised': ['Personal Information (e.g., '
                                              'names)',
                                              'Unspecified data']},
 'date_detected': '2023-06-30',
 'date_publicly_disclosed': '2023-08-09',
 'description': 'On August 9, 2023, Wharf Resources (U.S.A.), Inc. reported a '
                'data breach involving unauthorized access to an email account '
                'on June 30, 2023. Personal information, including names and '
                'other unspecified data, may have been compromised. The '
                'company is offering complimentary identity protection '
                'services to affected individuals.',
 'impact': {'brand_reputation_impact': 'Potential negative impact (identity '
                                       'protection services offered)',
            'data_compromised': ['Names', 'Unspecified personal information'],
            'identity_theft_risk': 'High (identity protection services '
                                   'offered)',
            'systems_affected': ['Email account']},
 'initial_access_broker': {'entry_point': 'Email account'},
 'investigation_status': 'Ongoing (as of disclosure date)',
 'response': {'recovery_measures': 'Complimentary identity protection services '
                                   'offered to affected individuals'},
 'title': 'Wharf Resources (U.S.A.), Inc. Data Breach via Unauthorized Email '
          'Access',
 'type': 'Data Breach'}