Background Check Company Sued Over Data Breach

4 parallel info breach lawsuits have been filed in opposition to a 45-year-old qualifications look at products and services firm primarily based in Massachusetts.

Creative Solutions, Inc. (CSI), positioned in Mansfield, gives track record screening, drug screening and security consulting products and services to companies, establishments and governments in the United States and overseas.

In accordance to an official submitting by the enterprise, on November 26 2021, CSI detected suspicious action on its computer programs. The organization then figured out that an unauthorized individual experienced obtained access to the company’s network and may possibly have copied sure data files dating from November 2018 to November 2021.

By the conclude of January 2022, an investigation into the exercise had uncovered that personalized identifying facts (PII) belonging to CSI’s purchasers had been compromised in the security incident. Data impacted by the incident integrated names, dates of delivery, monetary account numbers, Social Security numbers and driver’s license numbers 

In February 2022, CSI started mailing out facts breach notification letters to persons whose data was contained in the breached files. As quite a few as 164,673 people may have been impacted by the breach.

“We just take this incident and the security of particular info seriously,” stated CSI in a discover of information privacy incident letter.

“While we have existing safeguards in location, as section of our ongoing commitment to the privacy of particular information and facts in our treatment, we are working to implement increased security actions.”

CSI available complimentary obtain to 24 months of credit history checking, fraud session and id theft restoration companies to impacted people.

The company’s breach discovery came two months after CSI notified over a thousand men and women that their PII experienced been acquired by unauthorized folks in a different info security incident. 

Earlier this thirty day period, four lawsuits were submitted, every single making an attempt to establish a course-action case in opposition to CSI. The plaintiffs alleged that the enterprise unsuccessful to effectively protect the PII of the people today whose backgrounds it was employed to look at.

In the most not long ago filed suit, plaintiff Santos Acosta of New York accuses CSI of “recklessly or negligently failing to put into action and manage adequate and realistic steps to ensure that the PII was safeguarded.” 

Acosta even more claims that CSI failed to adhere to suitable procedures and methods regarding the information encryption.  

Some sections of this article are sourced from:
www.infosecurity-journal.com