The California Office of the Attorney General reported a data breach involving YRC Worldwide Inc. on September 21, 2018. The breach occurred on July 24, 2018, and involved a phishing attack that compromised personal information, specifically including names and social security numbers from an employment-related spreadsheet. Approximately seven individuals were affected, but evidence of misuse or unauthorized access has not been identified.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-140029
TPRM report: https://scoringcyber.rankiteo.com/company/yrc-freight-inc
"id": "yrc424072825",
"linkid": "yrc-freight-inc",
"type": "Breach",
"date": "7/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Transportation',
'name': 'YRC Worldwide Inc.',
'type': 'Company'}],
'attack_vector': 'Phishing',
'data_breach': {'file_types_exposed': ['Spreadsheet'],
'number_of_records_exposed': 7,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security Numbers']},
'date_detected': '2018-07-24',
'date_publicly_disclosed': '2018-09-21',
'description': 'A phishing attack compromised personal information, including '
'names and social security numbers from an employment-related '
'spreadsheet.',
'impact': {'data_compromised': ['Names', 'Social Security Numbers']},
'references': [{'date_accessed': '2018-09-21',
'source': 'California Office of the Attorney General'}],
'title': 'Data Breach at YRC Worldwide Inc.',
'type': 'Data Breach'}