- Verisource began sending data on violation of data violation and reported the incident in February 2024 to Maines AG
- It now says the number of victims is four million up from the first 55,000
- Names, addresses and SSNs were grabbed in the attack
Four million people may have had their sensitive data stolen in Verisource data violation that happened last year. The company confirmed the news in a new filing in the Maine Attorney General Office as well as in a notification of data violation sent to affected persons.
Verisource Services is a Houston-based employee benefit management company with clients in various industries in the US, including healthcare, education and the public sector.
It recently began sending data on violation of data violation of data stating that it became aware of “unusual activity” that disturbed access to certain systems, on February 28, 2024. The subsequent study concluding on April 17, 2025, decided that threat actors stared “certain personal information” the day before he was spotted.
Unknown attackers
The information stolen includes people’s names, addresses, birth dates, gender information and/or social security number (SSN). “Note that VSI has no evidence of anyone actual or suspected abuse of information involved in this incident,” the company said.
It is also worth mentioning that no one has so far assumed responsibility for the attack, and the data has not appeared anywhere on the dark web. Therefore, it is difficult to determine whether this was a simple smash-and-grab or a ransomware attack.
While the letter did not say how many people were affected by the violation, a list of the Maine Attorney General’s Office is putting up the number of victims of four million, up from 55,000 in May 2024, and another 112,000 in September 2024.
Verisource said it offers 12 months of free credit monitoring, identity theft protection and identity recovery services to the victims. While it may sound too little late, the fact that the data has not yet appeared can mean that the offer can make sense.
Via Bleeping computer
