BerryDunn suffers third-party breach, 1M affected
Accounting firm BerryDunn has suffered a third-party breach that revealed the personal information of over 1 million people.
Image by Unsplash.
Accounting firm BerryDunn has suffered a third-party breach that revealed the personal information of over 1 million people.
BerryDunn was notified on September 14th, 2023, that one of its vendors, Reliable Networks of Maine, a network maintenance and monitoring company, had “discovered suspicious network activity that was impacting its network.”
BerryDunn claims to have “immediately implemented its incident response protocols and engaged cybersecurity experts to assist with determining what occurred and whether any data was compromised.”
The information compromised varies from person to person, but the data involved includes:
- Names
- Addresses
- Driver’s license numbers
- Non-driver identification cards
More from Cybernews
Sainsbury’s installs more facial rec tech in stores: Should shoppers be worried?
"Phantom squatting” uses AI hallucinated domains for cyber attacks
What they’re doing to gamers is a robbery in broad daylight
Irish parliament expands Microsoft use, despite the EU’s efforts to ditch it
Can government AI actually scrub UAP footage from the internet?
The EU and Apple CEO Tim Cook held "constructive" talks after their Siri AI dispute in Europe
The investigation revealed that a threat actor had accessed Reliable’s network and copied data stored on its systems.
BerryDunn's internal investigation concluded on April 2nd, 2024, almost a year after the company was notified of the intrusion.
The accounting firm has “taken steps to secure the HAPG data, such as decommissioning all BerryDunn systems under Reliable’s control and migrating all HAPG data to secure internal BerryDunn systems that are continually monitored as part of our cybersecurity program.”
BerryDunn is offering identity theft protection services through IDX, A Zero Fox Company.