A data breach at DISA Global Solutions, Inc., a third-party employment screening services provider, affected more than 3.3 million people, the company said.
The company, which provides drug and alcohol testing and background checks, said it discovered on April 22, 2024, that it was the victim of cyber attack that gave “an authorized third party” access to individuals’ personal information from Feb. 9, 2024, to April 22, 2024, the company said in a notice on its website.
DISA said that while its forensics investigation “could not definitively conclude the specific information procured,” the personal information accessed could have included people’s names, Social Security numbers, driver’s license numbers, other government ID numbers, financial account information and other data elements.
Individuals affected by the breach were notified Friday, according to the letter filed with the Maine Attorney General’s office. DISA said it is “unaware of any attempted or actual misuse of any information involved in this incident.”
The company said it has contained the incident, notified law enforcement authorities and put additional security measures in place. Additionally, it will provide affected individuals with access to a free year of credit monitoring and identity restoration services through Experian.
“We take this incident seriously and sincerely regret any inconvenience this incident may cause affected individuals,” DISA said. The company did not immediately respond to questions from HR Dive.
The DISA data breach is the latest in a number of cyber attacks that have targeted employment services companies.
In July 2024, a Florida worker filed a class-action lawsuit against Paychex after an April data breach at the payroll services company exposed workers’ names and Social Security numbers. The worker alleged that the company waited a month before beginning to notify affected individuals.
Notably, in 2021, HR vendor UKG was involved in a major data breach that affected customers’ central HR functions for weeks and resulted in millions of dollars in damages for lost wages, benefits and compensation.
