Manpower Data Breach Impacts 144,180 Individuals
A devastating data breach at the global staffing and workforce solutions firm Manpower has left 144,180 individuals vulnerable to identity theft and financial loss. The breach, which occurred in early January 2025, was caused by a ransomware attack that compromised sensitive files containing personal information of affected individuals.
The Attack: A Ransomware Strike
On January 20, 2025, Manpower's systems went dark due to an IT outage, which ultimately revealed the extent of the breach. The company swiftly launched an investigation into the incident with the aid of external cybersecurity experts and notified the FBI. The attackers had gained access to Manpower's network between December 29, 2024, and January 12, 2025.
The Scope of the Breach
According to a data breach notification letter sent to impacted individuals, the investigation revealed that an unknown actor had gained unauthorized access to Manpower's network during this period. The attackers may have acquired certain files containing personal information, including social security numbers (SSNs), financial data, and HR analytics.
The RansomHub Group Claims Responsibility
The RansomHub ransomware group, a notorious cybercrime organization known for its attacks on major targets like Halliburton, Patelco Credit Union, and Christie's, has claimed responsibility for the Manpower breach. The group added Manpower to its Tor leak site on January 22, claiming the theft of approximately 500 GB of data.
The Company Takes Action
Manpower of Lansing has taken immediate action to secure its systems and enhance the security of its infrastructure. As a precautionary measure, the company is offering affected individuals up to 24 months of free Equifax credit monitoring, identity theft protection, and recovery services.
A Cautionary Tale
The Manpower data breach serves as a stark reminder of the importance of robust cybersecurity measures in protecting sensitive information. As ransomware attacks continue to escalate in frequency and severity, individuals must remain vigilant and take proactive steps to safeguard their personal data.
Follow us on Twitter: @securityaffairs for the latest updates on data breaches and cybersecurity threats. Share this article with your network to spread awareness about the importance of data protection.
Join our Mastodon community for real-time discussions on security, data breach news, and tips for staying safe online.
Like us on Facebook to stay up-to-date with the latest cybersecurity news and alerts.