STERICYCLE, INC.

Stericycle, Inc. notified California residents of a data security incident involving phishing attempts targeting employee email accounts. Unauthorized access occurred between October 2019 and April 2020. While employee accounts were accessed, no evidence suggests personal information within emails was accessed. Affected data may include names, SSNs, tax IDs, driver's license numbers, passport numbers, financial account numbers, and medical/health insurance info. Stericycle secured accounts, engaged a cybersecurity firm, and provided 24 months of credit monitoring via ID Experts.