HR technology data breaches expose employee personal information, Social Security numbers, and payroll data across every client company that uses the affected platform, often multiplying the number of people impacted by a single incident far beyond what a breach at any one employer would cause. Because HR technology and payroll platforms centralize sensitive employee data from hundreds or thousands of client businesses, a breach at one vendor can simultaneously affect employees who have never even heard of the company that was actually breached. These incidents carry real risk of identity theft, tax-related fraud such as fraudulent tax return filings, and unauthorized access to direct deposit and banking information. Affected individuals typically only learn they were impacted when their employer or the platform itself sends a notification, since the breach occurred at a vendor rather than their own workplace. This page tracks confirmed data breaches at HR technology and payroll platform companies, including what data was exposed, which companies notified regulators, and what affected employees can do next.
Superb Shifts, a healthcare staffing platform, notified the Vermont Attorney General that a data breach exposed Social Security numbers and government-issued ID numbers belonging to affected individuals.
Superb Shifts Data Breach Exposes Social Security Numbers and Government IDs Read More »
HealthStream, a Nashville-based healthcare software provider, disclosed in an SEC filing that an unauthorized party accessed employee and customer billing information stored on its corporate file servers.
HealthStream Data Breach Exposes Employee and Billing Information Read More »
Bridgeway Benefit Technologies LLC notified Vermont regulators that a security incident exposed Social Security numbers belonging to at least 15 state residents, with the full scope still unclear.
Bridgeway Benefit Technologies LLC Data Breach Exposes Social Security Numbers Read More »
IT staffing firm The Computer Merchant disclosed a breach exposing names, addresses, and Social Security numbers of nearly 3,000 people, with the true total likely higher nationwide.
The Computer Merchant Data Breach Exposes Names and Social Security Numbers Read More »
Safetyfirst Systems, LLC notified affected individuals that an unauthorized actor accessed a portion of its network in January 2026, potentially exposing personal information tied to its driver and employee compliance services.
Safetyfirst Systems Data Breach Exposes Personal Information Read More »
Estée Lauder is notifying individuals that hackers exploited an Oracle E-Business Suite flaw to steal personal, financial, and health information tied to its HR systems.
Estée Lauder Data Breach Exposes Social Security Numbers and Financial Information Read More »
New York’s Attorney General secured an $18 million settlement with 23andMe after finding the company failed to protect customers’ genetic data, which hackers accessed and stole in a major breach.
23andMe Data Breach Exposes Genetic Data and Personal Information Read More »
Mercor, an AI training data platform, confirmed a cyberattack tied to the LiteLLM supply chain compromise exposed the personal data of 21,677 individuals, including Social Security numbers and government ID numbers.
Mercor Data Breach Exposes Social Security Numbers and Government ID Numbers Read More »
A vulnerability in third-party benefits administrator Navia Benefit Solutions exposed the Social Security numbers, health plan data, and personal information of 287 individuals connected to HackerOne.
HackerOne Data Breach Exposes Social Security Numbers and Health Plan Data Read More »
Amicus Solutions Inc., doing business as Fedora Solutions, disclosed a data breach that exposed the Social Security numbers, medical data and health insurance information of 1,137 individuals nationwide.
Amicus Solutions Data Breach Exposes Social Security Numbers and Health Records Read More »