Cornerstone Staffing Solutions notified state attorneys general in September 2026 about a confirmed data breach involving an unauthorized party accessing personal information tied to the company. The exact number affected and specific data types have not been publicly disclosed. Affected individuals should monitor credit reports closely and watch for phishing attempts referencing the company.
| Company | Cornerstone Staffing Solutions |
|---|---|
| Industry | HR Technology |
| Data Types Exposed | Not Publicly Disclosed |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Vermont Attorney General, Washington State Attorney General, Iowa Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Cornerstone Staffing Solutions Data Breach?
Cornerstone Staffing Solutions recently filed formal notifications with several state attorneys general confirming a data breach affecting individuals connected to the company. As a result, people whose information was involved are now learning that their personal data may have been accessed by an unauthorized party.
The exact discovery date of the breach has not been publicly disclosed. However, the company’s notification filings in September 2026 indicate that it had completed enough of its internal review to begin notifying regulators and affected individuals. This timing suggests the incident had already been under review for some time before notifications went out.
Because staffing companies routinely hold sensitive records for both job applicants and placed workers, any unauthorized access to their systems can carry serious consequences. Cornerstone Staffing Solutions has not released extensive public details about how the intrusion occurred. Still, the fact that formal breach notification letters went out points to a confirmed compromise rather than a mere suspicion of one.
Following discovery, the company appears to have engaged in a review process before notifying affected individuals and regulators. This is a standard step after a confirmed security incident, allowing the organization to determine the scope of what happened. In addition, filing with multiple state attorneys general shows the breach affected residents across more than one state.
Who was affected?
The individuals affected by this breach likely include people who interacted with Cornerstone Staffing Solutions as job seekers, employees, or placed workers. Staffing agencies typically collect detailed personal records as part of the hiring and placement process. Because of this, both current and former workers could be impacted.
The exact number of people affected has not been publicly disclosed. Based on the multi-state filings, however, the breach appears to extend beyond a single state’s residents. Affected individuals may be located in Iowa, Vermont, Washington, and potentially other states not yet named in public filings.
It also remains unclear whether the exposed population includes only adults or could involve minors who applied for seasonal or entry-level positions. Until Cornerstone Staffing Solutions releases more specific information, affected individuals should assume they could be included if they have had any relationship with the company.
What Information Was Potentially Exposed?
The specific types of information involved in this breach have not been publicly disclosed. Cornerstone Staffing Solutions has not released a detailed list of the exact data categories affected in its notification filings available so far.
Even without confirmed details, it is worth understanding why staffing companies are attractive targets for cybercriminals. These organizations often process applications, background checks, and payroll information. As a result, any breach involving a staffing firm raises legitimate concern, even when specific categories remain undisclosed.
Because the involved data categories are unknown, affected individuals should remain cautious about any personal information they may have shared with the company. For example, this could include details submitted during an application, onboarding, or payroll process. Until more specific information becomes available, it is wise to treat any communication referencing this breach with care.
Generally speaking, exposure of personal information handled by employers or staffing agencies can lead to risks like phishing attempts, unauthorized account access, or identity theft. These risks depend heavily on what categories of data were actually involved, which remains unclear in this case. Therefore, individuals should stay alert without assuming the worst-case scenario until more facts emerge.
In addition, scammers often use breach announcements to craft convincing phishing messages, even when they do not have the actual stolen data. Because of this, affected individuals should be especially wary of unsolicited calls, texts, or emails claiming to be from Cornerstone Staffing Solutions or related services.
What is the company doing?
Cornerstone Staffing Solutions responded to the incident by notifying state regulators, a required step once a confirmed data breach affecting residents of those states is identified. This indicates the company has acknowledged the breach rather than merely investigating an unconfirmed report.
Specifically, the company filed notifications with the Vermont Attorney General, the Washington State Attorney General, and the Iowa Attorney General. These filings are a legally required part of responding to a confirmed breach.
Beyond these filings, the publicly available information does not detail additional remediation steps, such as whether free credit monitoring or identity protection services are being offered. Affected individuals should review any notification letter they receive directly from the company for specifics on available protections.
Going forward, it is reasonable to expect that Cornerstone Staffing Solutions will continue to update affected individuals as its investigation progresses. In the meantime, the regulatory filings serve as the clearest confirmation currently available that a breach took place.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Affected individuals should request a copy of their credit report and review it carefully for unfamiliar accounts or inquiries. You can get free credit reports from each of the three major credit bureaus on a regular basis.
Because identity thieves sometimes wait months before using stolen information, ongoing monitoring matters more than a single check. As a result, consider checking your reports periodically over the next year rather than just once.
Watch for Phishing Attempts
Given that breach notifications often trigger a wave of scam attempts, affected individuals should be cautious of any unexpected emails, texts, or calls referencing Cornerstone Staffing Solutions. Scammers frequently pose as companies involved in a breach to trick people into revealing additional information.
Therefore, never click links or provide personal details in response to unsolicited messages. Instead, contact the company directly using a verified phone number or website if you need to confirm anything about your notification letter.
Consider a Fraud Alert or Credit Freeze
Because the full scope of exposed data has not been disclosed, placing a fraud alert on your credit file is a precautionary step worth considering. A fraud alert requires creditors to take extra steps to verify your identity before opening new credit in your name.
For stronger protection, you can also request a credit freeze with each bureau. This largely blocks new creditors from accessing your credit file at all, making it harder for anyone to open accounts fraudulently using your identity.
Stay Informed and Seek Legal Guidance
Affected individuals should keep any notification letter they receive from Cornerstone Staffing Solutions, since it may contain specific details relevant to their situation. In addition, watch for updates as more information about the breach becomes available.
If you believe you were affected and have concerns about your rights, consulting a data breach attorney can help clarify your options. Many offer free case evaluations, which can be a useful first step in understanding whether you may be eligible for compensation.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Vermont Attorney General
Official data breach notification report (PDF) from Washington State Attorney General
Official data breach notification report (PDF) from Iowa Attorney General