DecisionHR

DecisionHR Holdings, Inc. reported a data breach occurring between November and December 2017 where an unauthorized third party accessed corporate email accounts of three employees. The emails contained personal information of individuals, including employment records, payroll documents, tax forms, and insurance documentation. DecisionHR implemented corrective actions including password resets, disabling web email access, enforcing 2FA on VPN, and enhanced employee training. Affected individuals were offered one year of credit monitoring and identity protection services through ID Experts.