THE GEO GROUP, INC.

The GEO Group, Inc. notified the New Hampshire Attorney General of a ransomware attack discovered on August 19, 2020. The incident affected approximately 1 New Hampshire resident, exposing personal information including names, SSNs, driver's license numbers, and medical/health data. The actor gained access, exfiltrated data, and deployed ransomware. GEO contained the attack, engaged forensic investigators, and notified the FBI. Remediation included EDR deployment, password resets, and 24 months of credit monitoring.

The GEO Group Inc. reported to HHS on 2020-11-04 a Hacking/IT Incident affecting 3,991 individuals. Breached information located on Network Server. An employee was victim of an email phishing attack exposing ePHI including names, DOB, SSN, addresses, and diagnoses. The entity implemented technical safeguards and retrained employees.

The GEO Group Inc. experienced a ransomware attack discovered on August 19, 2020, with unauthorized access occurring between July 17 and August 19, 2020. The incident potentially exposed personal information including names, addresses, dates of birth, Social Security numbers, driver's license numbers, and medical treatment information. GEO severed network connections, engaged forensic experts, notified the FBI, and implemented additional security protocols. Affected individuals were offered two years of Experian IdentityWorks.

The GEO Group, Inc. disclosed a ransomware attack discovered on August 19, 2020. Unauthorized actors accessed personal information including names, SSNs, DOBs, driver's licenses, and health information. GEO contained the attack, engaged forensic experts, notified the FBI, and offered two years of Experian IdentityWorks to affected individuals. Notices were sent November 3, 2020.

The GEO Group Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-11-03. 9 Massachusetts residents were affected. The report records the breach type as electronic.

The GEO Group Inc. reported an external system breach (hacking) occurring between July 17, 2020, and August 19, 2020. The incident compromised approximately 20,017 individuals, including 3 Maine residents. Affected data included names and Social Security Numbers. The company engaged outside counsel and provided 2 years of complimentary credit monitoring through Experian to affected individuals.

The GEO Group Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2020-07-17 and was reported on 2020-11-03. 567 Indiana residents were affected. 20,017 individuals affected in total.