DISA Global Solutions , a United States- based employee verification services company , announced that the data of 3.3 million people was breached.
See also: Yahoo data leak: 602,000 email accounts exposed
DISA, a company that offers services such as drug and alcohol testing and background checks to more than 55,000 businesses, including a third of Fortune 500, confirmed that its customer data was breached. The confirmation came in a filing Monday with the Maine attorney general.
DISA revealed that it suffered a “cyber incident” that affected a “limited portion” of its network on April 22, 2024. The internal investigation revealed that a hacker had penetrated the company’s network as early as February 9, 2024, remaining unseen for more than two months.
In a letter sent to those affected by the data breach, including people involved in employee audits, DISA said the attacker "obtained certain information" from its systems.
See also: Finastra notifies those affected by the recent breach
In a statement to the Massachusetts attorney general, DISA revealed that the stolen information included Social Security numbers, financial account data such as credit card numbers, and government identification documents. According to the filing, the breach affected more than 360,000 Massachusetts residents, confirming the serious impact of this incident.
In its data breach notification letter, DISA stated that it was “not able to confirm with absolute accuracy the specific data that was exposed.” This suggests that DISA does not have the necessary technical tools, such as logs, to determine precisely what internal data was compromised.
As stated on its website, DISA collects a wide range of personal and sensitive data. This includes information about applicants' work history, educational background, criminal record, and credit profile.
It remains unclear who was responsible for the cyberattack or how the security . It is also unclear why DISA delayed in notifying affected individuals about the breach.
See also: Hacker leaked data of 12 million Zacks Investment users
Data breaches are one of the most significant problems in the digital age. They occur when sensitive information, such as personal or financial data, is exposed or obtained by unauthorized individuals. Data breaches can be caused by malicious attacks, human error, or inadequate security measures. The consequences include financial losses, reputational damage, and loss of user trust, making it essential to take strict security measures.
Source: techcrunch
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
