TRC Staffing Services suffers major data breach, nearly 160K affected
GEORGIA, UNITED STATES — TRC Staffing Services, Inc. (TRC Talent Solutions), a major staffing and recruitment firm, reported a significant data breach affecting 158,593 individuals.
The Atlanta-based staffing firm filed a notice with the Maine Attorney General’s office on May 24, detailing the breach that occurred between March 25 and April 12.
The breach was discovered on April 12 when TRC identified suspicious activity on its computer systems, including the encryption of certain files.
Sensitive data exposed in cyberattack
The data breach involved an external system breach where an unknown actor gained unauthorized access to TRC’s systems. The compromised information includes the names and Social Security numbers of the affected individuals.
TRC Talent Solutions has since offered credit monitoring and identity restoration services to those impacted by the breach.
In its notification, TRC Talent Solutions stated: “On or about April 12, 2024, TRC identified suspicious activity on certain computer systems that included the encryption of certain files.”
The company immediately secured its systems and launched an investigation with the help of third-party cybersecurity specialists. Federal law enforcement was also notified about the incident.
Massive breach highlights ransomware risks
According to a report by software firm Comparitech, this breach is considered one of the largest ransomware attacks on the U.S. service industry this year, with nearly 160,000 records affected. The ransomware group BlackSuit has claimed responsibility for the attack.
BlackSuit, which emerged in April 2023, is known for targeting critical industries and employing a double extortion method—demanding ransom for decryption keys and threatening to sell or publish stolen data.
TRC Talent Solutions is urging affected individuals to take advantage of the free year of CyEx credit monitoring services being offered. Victims are advised to remain vigilant for any suspicious activity in their accounts to prevent potential identity fraud.
