CSC ServiceWorks, a commercial laundry services and air vending systems provider, has confirmed a data breach incident that it suffered during a 2023 cyberattack. Based on reports, the unauthorised access to its data has resulted in the exposure of the information owned by about 35,000 people.
The corporation became aware of the incident last February after noticing suspicious activity on its network. This unknown behaviour prompted the company to employ a third-party service provider to help investigate the situation. The initial assessment of the attack showed that unknown intruders had entered some of its computer systems.
In addition, the company believes that the threat actors had access to compromised systems on its network between September 23, 2023, and February 4, 2024.
CSC ServiceWorks assured that they immediately deployed the necessary measures to address this incident.
CSC ServiceWorks stated that it protected its computer systems from potential attacks and contacted relevant law enforcement agencies about the incident.
It received the investigation results a couple of months ago and has been working to determine the precise addresses of the affected individuals since then. However, the company explained that the type of personal data varies depending on the person concerned during the breach.
Some confirmed compromised information includes full name, date of birth, contact information, government identification, financial data, health insurance information and limited medical information. Still, in some instances, the company revealed that the attack compromised the personal details of the affected people’s children.
On the other hand, the company urged the impacted individuals to enrol in the free identity protection services they offered to help detect the misuse of personal information revealed during the incident.
Furthermore, it assured every concerned party that it had already recruited third-party security providers to handle this problem, investigate the unlawful behaviour, and strengthen its systems to protect its customers’ data.
CSC explained that they rolled out these notification letters to provide more information about their work and to offer you the opportunity to enrol in free credit monitoring. After CSC published the report, it submitted a breach notification to the Office of the Maine Attorney General, stating that the issue affected 35,340 people.