(Credit: Vertigo3d/Getty Images)
A hack at employee screening firm DISA Global Solutions has exposed the personal data of more than 3.3 million people.
DISA confirmed the breach in a Monday filing with Maine's attorney general, TechCrunch notes.
The incident occurred on Feb. 9, 2024, and was discovered on April 22, 2024. Upon discovery, DISA says it contained the incident and initiated an internal investigation with the help of third-party forensic experts. The investigation found that the hackers "procured some information," but DISA couldn’t “definitively conclude the specific information procured.”
DISA provides employment screening solutions, such as drug and alcohol testing and background verifications, to franchises. According to the company website, its client base boasts 55,000 customers, including 30% of Fortune 500 companies.
The exposed data could include names, Social Security numbers, driver’s license numbers, other government ID numbers, financial account information, and more, DISA says. These data points were obtained from the screening services provided to employers and prospective employers, the company adds.
DISA has already begun notifying affected individuals. According to the filing with Maine’s attorney general, 15,198 of the 3,332,750 individuals affected are residents of Maine. Another filing shows that over 360,000 are residents of Massachusetts.
If you believe your data has been exposed or have questions about the breach, you can call DISA’s toll-free number at 833-931-9800, Monday through Friday, from 9:00 a.m. to 11:00 p.m. ET.
DISA is offering affected individuals 12 months of credit monitoring and identity restoration services through Experian. Interested individuals must enroll by June 30. The company has also asked them to remain vigilant against potential phishing attacks, monitor their accounts regularly, and report suspicious activities to authorities.
Additionally, affected individuals can place a fraud alert on their credit files via Equifax, Experian, and TransUnion or freeze their credits. These steps ensure that credit, loans, and services aren’t approved without consent.