HR technology data breaches expose employee personal information, Social Security numbers, and payroll data across every client company that uses the affected platform, often multiplying the number of people impacted by a single incident far beyond what a breach at any one employer would cause. Because HR technology and payroll platforms centralize sensitive employee data from hundreds or thousands of client businesses, a breach at one vendor can simultaneously affect employees who have never even heard of the company that was actually breached. These incidents carry real risk of identity theft, tax-related fraud such as fraudulent tax return filings, and unauthorized access to direct deposit and banking information. Affected individuals typically only learn they were impacted when their employer or the platform itself sends a notification, since the breach occurred at a vendor rather than their own workplace. This page tracks confirmed data breaches at HR technology and payroll platform companies, including what data was exposed, which companies notified regulators, and what affected employees can do next.
Poppins Payroll Company notified Vermont regulators of a data breach that exposed Social Security numbers, financial account codes, and credit and debit account information.
Blanchard Training & Development, Inc. notified the California Attorney General of a data breach that may have exposed personal information belonging to employees, clients, or customers.
Blanchard Training & Development, Inc. Data Breach Exposes Personal Information Read More »
A ransomware group calling itself Chaos claims to have stolen data from Express Employment Professionals after the staffing firm allegedly went silent on negotiations. Here is what is known so far.
Express Employment Professionals Data Breach Exposes Personal and Employment Records Read More »
AVL Growth Partners, an Ampleo Company, notified the Vermont Attorney General of a data breach exposing Social Security numbers, financial account codes, and credit and debit account information.
Cornerstone Staffing Services, Inc. notified regulators that a data breach exposed Social Security numbers, financial account codes, and credit and debit account information belonging to affected individuals.
Compunnel, a technology and workforce staffing firm, suffered a ransomware attack claimed by the group SafePay, raising concerns that personal and employment-related data tied to workers and job seekers may have been exposed.
Compunnel Data Breach Exposes Personal and Employment-Related Information Read More »
Quattro Business Support Services, Inc notified regulators of a data breach exposing Social Security numbers, government ID numbers, financial account details, and health records.
Lightcast, a human resources software and labor market analytics provider, suffered a ransomware attack attributed to the direwolf threat group, raising concerns about exposed personal information.
Lightcast Data Breach Exposes Employee and Client Personal Information Read More »
Catalyst Brands LLC has notified individuals that a third-party vendor breach exposed Social Security numbers, government ID numbers, and other sensitive personal data tied to HR and payroll services.
Catalyst Brands LLC Data Breach Exposes Social Security Numbers and Government ID Data Read More »
HumanEdge, Inc. notified regulators that unauthorized parties may have accessed Social Security numbers belonging to affected individuals, prompting official breach notification filings.
HumanEdge, Inc. Data Breach Exposes Social Security Numbers Read More »