SI Group, Inc.

SI Group, Inc. disclosed a ransomware attack occurring between August 9 and 14, 2021. The threat actor infiltrated systems, encrypted data, and exfiltrated files containing personal information of employees, contractors, and beneficiaries. Affected data included names, addresses, dates of birth, SSNs, driver's license numbers, passport numbers, and health/insurance information. SI Group isolated networks, engaged forensic experts, and notified federal law enforcement. Affected individuals were offered two years of complimentary credit monitoring and identity theft protection through Equifax.