CBIZ says web page breach lead to customer data theft

Red padlock open on electric circuits network dark red background
(Image credit: Shutterstock/Chor muang)

Financial management and consulting powerhouse CBIZ suffered a cyberattack in which it lost sensitive customer data.

In a data breach notification letter it posted on its website earlier this week, CBIZ said that between June 2 and June 21, an unnamed threat actor found and exploited a vulnerability in one of its web pages. They used that vulnerability to extract sensitive customer information that was stored “in certain databases”. We don't know how many people are affected.

When the company learned about the incident, on June 24, it brought in third-party cybersecurity professionals to investigate and assess the damages. The results have shown that “individuals associated with multiple CBIZ clients” were impacted by the incident.

Identity theft protection

“The information varied by CBIZ client and included information related to retiree health and welfare plans which, depending on the individual, may have included their name, contact information, Social Security number, date of birth, and/or date of death,” the announcement reads.

A month later, on August 28, the company started reaching out to affected individuals and notifying them of the incident. In the letter, the company offered two years of complimentary credit monitoring and identity theft protection services to people whose Social Security numbers were compromised.

“CBIZ takes the responsibility of safeguarding information very seriously,” the announcement concludes. “To help ensure a similar incident does not reoccur CBIZ has fixed the vulnerability and implemented measures to further enhance the security of its systems, and CBIZ is also working closely with law enforcement.”

So far, there is no evidence of the stolen data being misused, and at present time, no threat actors have yet assumed responsibility for the attack.

With more than 120 offices in the United States, and more than 6,700 employees, CBIZ is one of the largest organizations in its industry. It offers tax services, insurance, business advice, and human resources services. According to BleepingComputer, its revenue last year was $.159 billion.

More from TechRadar Pro

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
Someone holding a passport with two boarding passes inside it
Top digital loan firm security slip-up puts data of 36 million users at risk
ID theft
Over a million patients potentially hit after another US healthcare provider hit by cyberattack
A digital themed isometric showing a neon padlock in the foreground, and a technological diagram of a processor logic board in the background.
Major breach hits employee screening firm - 3.3 million affected as hackers steal DISA data
ransomware avast
The biggest addiction treatment provider in the US says it was hit by data breach
A computer being guarded by cybersecurity.
Zacks Investment hit in data breach - 12 million users potentially at risk
Representational image depecting cybersecurity protection
Top venture capital firm Insight Partners confirms it was hit by cyberattack
Latest in Security
Isometric demonstrating multi-factor authentication using a mobile device.
NCSC gets influencers to sing the praises of 2FA
Sam Altman and OpenAI
OpenAI is upping its bug bounty rewards as security worries rise
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Dangerous new CoffeeLoader malware executes on your GPU to get past security tools
China
Notorious Chinese hackers FamousSparrow allegedly target US financial firms
A digital representation of a lock
NYU website defaced as hacker leaks info on a million students
NHS
NHS IT supplier hit with major fine following ransomware attack
Latest in News
Nintendo Switch 2 Joy-Con up-close from app store
Nintendo's new app gave us another look at the Switch 2, and there's something different with the Joy-Con
cheap Nintendo Switch game deals sales
Nintendo didn't anticipate that Mario Kart 8 Deluxe was 'going to be the juggernaut' for the Nintendo Switch when it was ported to the console, according to former employees
Three angles of the Apple MacBook Air 15-inch M4 laptop above a desk
Apple MacBook Air 15-inch (M4) review roundup – should you buy Apple's new lightweight laptop?
Witchbrook
Witchbrook, the life-sim I've been waiting years for, finally has a release window and it's sooner than you think
Amazon Echo Smart Speaker
Amazon is experimenting with renaming Echo speakers to Alexa speakers, and it's about time
Shigeru Miyamoto presents Nintendo Today app
Nintendo Today smartphone app is out now on iOS and Android devices – and here's what it does