XYZ Corp

XYZ Corp experienced a significant security breach when attackers gained access through a sophisticated phishing scheme. Despite robust security measures, the attackers managed to exfiltrate sensitive employee data, including personal identification and financial details. The incident caused not only immediate operational disruptions but also longer-term reputational damage. XYZ is now bolstering its security posture through enhanced employee training and more stringent access controls.

Source: https://purplesec.us/resources/cyber-security-statistics/

TPRM report: https://scoringcyber.rankiteo.com/company/xyz-corp

"id": "xyz709050824",
"linkid": "xyz-corp",
"type": "Cyber Attack",
"date": "05/2023",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'name': 'XYZ Corp', 'type': 'Corporation'}],
 'attack_vector': 'Phishing',
 'data_breach': {'data_exfiltration': 'sensitive employee data',
                 'personally_identifiable_information': ['personal '
                                                         'identification'],
                 'sensitivity_of_data': 'sensitive',
                 'type_of_data_compromised': ['personal identification',
                                              'financial details']},
 'description': 'XYZ Corp experienced a significant security breach when '
                'attackers gained access through a sophisticated phishing '
                'scheme. Despite robust security measures, the attackers '
                'managed to exfiltrate sensitive employee data, including '
                'personal identification and financial details. The incident '
                'caused not only immediate operational disruptions but also '
                'longer-term reputational damage. XYZ is now bolstering its '
                'security posture through enhanced employee training and more '
                'stringent access controls.',
 'impact': {'brand_reputation_impact': 'longer-term reputational damage',
            'data_compromised': ['personal identification',
                                 'financial details'],
            'operational_impact': 'operational disruptions'},
 'initial_access_broker': {'entry_point': 'Phishing'},
 'post_incident_analysis': {'corrective_actions': ['enhanced employee training',
                                                   'more stringent access '
                                                   'controls']},
 'response': {'remediation_measures': ['enhanced employee training',
                                       'more stringent access controls']},
 'title': 'XYZ Corp Security Breach',
 'type': 'Data Breach'}