On September 10, 2024, Aramark filed a notice of data breach with the Attorney General of Massachusetts after discovering that hackers were able to obtain confidential employee information in the company’s possession. In this notice, Aramark explains that the incident resulted in an unauthorized party being able to access employees’ sensitive information, which includes their names, addresses, direct deposit details, and Social Security numbers. Upon completing its investigation, Aramark began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.
If you received a data breach notification from Aramark, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Aramark data breach. For more information, please see our recent piece on the topic here.
What Caused the Aramark Data Breach?
The Aramark data breach was only recently announced, and more information is expected in the near future. However, Aramark’s filing with the Attorney General of Massachusetts provides some important information on what led up to the breach. According to this source, recently, Aramark learned that an unauthorized party was able to create a website that looked like Aramark’s website to trick employees into logging in with their usernames and passwords. Evidently, the unauthorized party was able to use this information to access employees’ myPay site.
Upon learning about the incident, Aramark launched an investigation. Through this investigation, Aramark confirmed that the unauthorized party was able to access certain confidential employee information. While Aramark believes that
.. the goal of the unauthorized party was to chang the direct deposit information to misdirect employees’ pay, the investigation revealed that the unauthorized party was able to access other personal employee information.
After learning that sensitive employee data was accessible to an unauthorized party, Aramark reviewed the compromised files to determine what information was leaked and which employees were impacted. While the breached information varies depending on the individual, it may include your name, address, direct deposit details, and Social Security number.
On September 10, 2024, Aramark sent out data breach letters to those current and former employees who were affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.
More Information About Aramark
Founded in 1936, Aramark is a food services and facilities company based out of Philadelphia, Pennsylvania. Aramark provides food services, uniform services and facilities services to educational institutions, prisons, healthcare facilities, businesses, and hotels & resorts. Aramark is publicly traded on the New York Stock Exchange under the symbol “ARMK.” Aramark employs more than 262,550 people and generates approximately $19.6 billion in annual revenue.
