Breach

Russian state-sponsored threat group Coldriver has been suspected by the Free Russia Foundation of being behind the intrusion, which involved the targeting of several entities to exfiltrate internal documents, grant reports, and other correspondences in retaliation against pro-democracy Russians

While Avis has provided the total number of individuals affected by the incident in its filing with the Office of the Maine Attorney General, it has not specified the nature of the intrusion as well as its impact on employees.

The payment processing service said credit card information was accessed in June 2024.

Despite immediately acting to block the infiltration of the targeted business application, attackers' access between Aug. 3 and Aug. 6 enabled the exfiltration of individuals' names and other sensitive details.

Included in the information exfiltrated as part of the breach were individuals' names, birthdates, Social Security numbers, Medicare account numbers, addresses, and health insurance details, said the Centers for Medicare & Medicaid Services and the Wisconsin Physicians Service Insurance Corporation.

Immediate withdrawal and deposit takedowns, as well as notifications to the FBI's Internet Crime Complaint Center and the Singaporean police have been conducted by Penpie following the theft on Tuesday.

Information compromised due to the intrusion included employees' contact details and certain encrypted and hashed credentials but no evidence indicated the theft of any customer or supplier data, said Microchip in a new filing with the Securities and Exchange Commission.