A construction personnel company on RHODE ISLAND will pay $230,000 in fines for a 2020 data breach that affected more than 3,000 Massachusetts residents, the Massachusetts Attorney General’s office announced Thursday. / PBN FILE PHOTO
WARWICK – Construction Personnel Company TradeSource Inc. will pay $230,000 in fines for a 2020 data breach that affected more than 3,000 Massachusetts residents, the office of Massachusetts Attorney General Maura Healey announced Thursday.
A TradeSource employee, headquartered in Warwick with a branch in Natick, Massachusetts, was the victim of a phishing email in December 2020, resulting in a compromise of credentials that allowed hackers to enter the system and steal personal information. from users, including names and social security numbers.
In response to the data breach, TradeSource offered affected residents two years of free credit monitoring and identity theft protection.
Healey’s office alleged that TradeSource violated Massachusetts data privacy laws by failing to implement a written information security program during or prior to the data breach. Massachusetts law requires companies to maintain a written information security program to protect such data.
“Businesses need to have the right security measures and systems in place to protect individuals’ sensitive information from hackers,” Healey said. “My office is pleased to have reached this settlement and will continue to ensure that companies comply with our data security laws and protect the personal information of Massachusetts residents.”
Under the terms of the settlement, TradeSource must also comply with Massachusetts laws, continue to implement and maintain a written information security program, and continue to train its employees in the importance of personal information security.
TradeSource did not immediately respond to a request for comment.
Do you want to share this story? Click here to buy a link that will allow anyone to read it on any device, whether they are a subscriber or not.
This post RI company settles data breach with Mass. AG for $230K
was original published at “https://pbn.com/r-i-company-settles-data-breach-with-mass-ag-for-230k/”