From 112K to 4M folks' data – HR biz attack goes from bad to mega bad

HELLFIRE

https://www.theregister.com/2025/04/28/verisource_data_spill_estimate_up/

Houston-based VeriSource Services’ long-running probe into a February 2024 digital break-in shows the data of 4 million people – not just a few hundred thousand as it first claimed - was accessed by an “unknown actor”. The tech company, which provides employee benefits administration services, began contacting those affected on April 23, and has now offered more details about the attack in a filing with Maine Attorney General’s office. In addition to the estimated 4 million affected individuals, VeriSource said names, addresses, dates of birth, genders, and social security numbers may have been stolen, although the data points won’t be the same for each person. The total number of affected individuals and the fact that gender and home address information may have been pinched are the main updates to the company’s previous notification letters sent out last year. The filing with the Maine AG’s office - late last week - is the second disclosure released by the company. The earlier one was published in August 2024 with the US Health and Human Services Office for Civil Rights. According to that earlier filing, VeriSource thought at the time that only around 112,000 people were affected. …

Regards

px_eliezer_

How come it is the STATE OF MAINE that seems to always be alerting us?

Maine seems to have a very tough law…!

Thought it would be California or such….

There’s an old saying, “As Maine goes, so goes the nation”.

But here. the rest of the nation does not seem to be following—so thank God for Maine.