Forest Global Training Partners

Cyber Risks · Krebs on Security

Human Resources Firm Comply Right Breached

Summary: ComplyRight, a Pompano Beach, Florida-based human resources firm whose efile4biz.com site prepares 1099 and W2 tax forms for some 76,000 organizations, said unauthorized access to its site persisted from April 20, 2018 until it was discovered on May 22, 2018, potentially exposing names, addresses, phone numbers, email addresses and Social Security numbers. In a breach notice sent to Wisconsin's consumer protection department, the company later said the breach affected 662,000 people, and it is offering 12 months of free credit monitoring to those affected.

Bottom line: The exposed data is exactly what tax refund fraud runs on, and ComplyRight's own site had promised protection that would 'thwart even the most determined cyber criminals' - while Krebs found no employee on LinkedIn with a security-titled role. With 662,000 people affected and breach letters so vague that recipients thought they were fake, the notification itself became a second failure.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related