WMS Partners, LLC

The Maine Office of the Attorney General disclosed a data breach affecting WMS Partners, where 668 individuals, including 4 Maine residents, had their personal information exposed due to an inadvertent disclosure on December 21, 2020. The breach involved the unintentional release of sensitive data, though the exact nature of the compromised information (e.g., financial records, personally identifiable information) was not explicitly detailed in the report. In response, the company is providing complimentary 12-month identity theft protection via Experian IdentityWorks to mitigate potential risks for those impacted. The incident highlights vulnerabilities in data handling procedures, particularly around accidental exposure, which can lead to identity theft or fraud if exploited by malicious actors. While no evidence of malicious intent or further exploitation was reported, the breach underscores the importance of robust data security protocols to prevent unauthorized disclosures, even when unintentional.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/879204bd-cf9f-4e22-be1b-e9cc7c7202fd.shtml

TPRM report: https://www.rankiteo.com/company/wms-partners

"id": "wms1003091725",
"linkid": "wms-partners",
"type": "Breach",
"date": "12/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 668,
                        'name': 'WMS Partners',
                        'type': 'Organization'}],
 'attack_vector': 'Inadvertent Disclosure',
 'customer_advisories': 'Complimentary 12-month identity theft protection '
                        'offered to affected individuals via Experian '
                        'IdentityWorks',
 'data_breach': {'number_of_records_exposed': 668,
                 'personally_identifiable_information': True},
 'date_detected': '2020-12-21',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving WMS Partners, affecting 668 individuals, '
                'including 4 residents of Maine. The breach occurred due to '
                'inadvertent disclosure, and the organization is offering a '
                'complimentary 12-month identity theft protection service '
                'through Experian IdentityWorks to those affected.',
 'impact': {'brand_reputation_impact': 'Potential (due to breach disclosure)',
            'data_compromised': True,
            'identity_theft_risk': 'High (mitigated by offered identity theft '
                                   'protection)'},
 'post_incident_analysis': {'root_causes': 'Inadvertent disclosure of data'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Public disclosure via Maine Office of '
                                        'the Attorney General',
              'remediation_measures': 'Offered 12-month complimentary identity '
                                      'theft protection to affected '
                                      'individuals',
              'third_party_assistance': 'Experian IdentityWorks (for identity '
                                        'theft protection)'},
 'title': 'WMS Partners Data Breach (December 2020)',
 'type': 'Data Breach'}