DISA Global Solutions, a workers’ control service provider, said she had a breach of data affecting more than 3.3 million people.
DISA, which provides services such as drug and alcohol tests and history checks More than 55,000 businesses And one -third of Fortune 500 companies, confirmed the data breach in a deposit with Maine’s Attorney General on Monday.
DISA said it discovered that there was a victim of a “cyberspace” incident that influenced a “limited part” of its network on April 22, 2024. An internal survey found that a hacker had infiltrated the company network on February 9th 2024 from two months.
In a letter sent to those affected by data breach, which includes people undergoing employee control tests, DISA said the attacker “supplied some information” from its systems.
In a separate deposit With the Attorney General of Massachusetts, DISA confirmed that stolen information included the social security numbers of individuals, financial account information, including credit card numbers and recognition documents issued by the government. This deposition confirmed that more than 360,000 Massachusetts residents were influenced by the violation.
However, in the letter of breach of its data, DISA stated that “it could not definitively conclude the specific data supplied”, suggesting that the company does not have the technical means, such as logs, detect exactly which internal data access or outraged.
According to websiteDISA collects a wide range of personal and sensitive information, including details of a applicant’s work history, educational background, criminal record and credit history.
It is not yet known who was behind Cyberettack or how the body was compromised. It is also unclear because it has taken DISA so much to alert the affected people to the breach.
DISA did not answer TechCrunch immediately.