Youth Consultation Service

On March 29, 2022, the Maine Office of the Attorney General disclosed a data breach at Youth Consultation Service (YCS), where unauthorized actors gained access to its computer network between April 13, 2021, and May 21, 2021. The incident compromised sensitive personal and financial data of 6,132 individuals, including three Maine residents. Exposed information included names, addresses, and financial account details, raising risks of fraud and financial exploitation. Despite the severity of the breach, no identity theft protection services were provided to affected individuals, leaving them vulnerable to potential misuse of their data. The breach highlights critical gaps in YCS’s cybersecurity measures, particularly in detection, response, and post-incident support, which could erode trust among clients and stakeholders. The lack of proactive mitigation further exacerbates the reputational and operational consequences for the organization.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f6095f78-075d-45cf-80c7-750b16077b4d.shtml

TPRM report: https://www.rankiteo.com/company/ycs

"id": "ycs600082025",
"linkid": "ycs",
"type": "Breach",
"date": "4/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '6,132',
                        'industry': 'Healthcare / Social Services',
                        'name': 'Youth Consultation Service (YCS)',
                        'type': 'Non-profit Organization'}],
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': '6,132',
                 'personally_identifiable_information': ['names', 'addresses'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Financial Account Information']},
 'date_publicly_disclosed': '2022-03-29',
 'description': 'Unauthorized access to the computer network of Youth '
                'Consultation Service (YCS) occurred between April 13, 2021, '
                'and May 21, 2021, affecting approximately 6,132 individuals, '
                'including three Maine residents. The accessed information '
                'included names, addresses, and financial account information. '
                'No identity theft protection services were offered.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'financial account information'],
            'identity_theft_risk': 'Yes (no protection services offered)',
            'payment_information_risk': 'Yes'},
 'references': [{'date_accessed': '2022-03-29',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'title': 'Data Breach at Youth Consultation Service (YCS)',
 'type': 'Data Breach'}