VeriSource Data Breach Exposes Personal Data of 4 Million People in 2024

In February 2024, VeriSource Services, a Houston-based employee benefits company, disclosed a significant data breach impacting approximately 4 million individuals. The breach compromised sensitive personal identifiable information (PII), including names, addresses, dates of birth, gender, and Social Security numbers.

Initially, VeriSource reported the breach affected 112,000 people, but after a comprehensive forensic investigation concluded in early 2024, the number was revised to 4 million. The company promptly notified the Maine Attorney General’s office and began informing impacted individuals, including current and former employees of its clients.

Upon discovery of the breach on February 28, 2024, VeriSource secured its environment and engaged a leading independent cybersecurity firm to conduct a forensic investigation. The company has since implemented enhanced security measures to prevent future incidents.

To mitigate risks, VeriSource is providing affected individuals with 12 months of free identity theft protection and credit monitoring services through IDX. Enrollment details are included in breach notification letters, which recipients should not ignore.

Recommended Actions for Affected Individuals

If you receive a notification from VeriSource, take the following steps to protect yourself against identity theft and fraud:

• Enroll in the free identity theft protection and credit monitoring services offered by VeriSource through IDX.
• Regularly check your credit reports from Equifax, Experian, and TransUnion for any unauthorized activity. Free reports can be obtained at AnnualCreditReport.com.
• Consider freezing your credit to prevent new accounts from being opened fraudulently. This requires unfreezing when applying for credit and refreezing afterward.
• Place a fraud alert on your credit reports to require extra identity verification before new credit is granted.

Data breaches like VeriSource’s highlight the critical importance of robust cybersecurity practices and proactive identity protection. Organizations must prioritize securing sensitive employee and client data to prevent costly breaches and protect individuals from identity theft.

By leveraging advanced threat detection, continuous monitoring, and rapid incident response, companies can reduce the risk and impact of data breaches. For individuals, vigilance and timely action remain essential to mitigate potential harm from compromised personal information.