Serco Inc.
ent_019ea89d4e6c5b3463396a69432edf3c
Disclosures
9
HHS OCR · State AG · Leak Site · 8 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
10,140
nationwide · HHS OCR VA
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- Serco Inc.
- Normalized
- serco— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300IOY1KKX4KLK978
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- serco.com
Disclosure history (9)newest first
- VIRGINIAHHS OCRas victim2023-08-22
Serco Inc. Group Health Plan reported to HHS on 2023-08-22 a Hacking/IT Incident affecting 10,140 individuals. Breached information located on Network Server. A business associate experienced a ransomware attack compromising PHI including names, addresses, SSNs, and birthdates.
- New Hampshire State AGas victim2023-08-07
Serco, Inc. notified the NH Attorney General of a third-party breach involving benefits administrator CBIZ, Inc. CBIZ suffered a MOVEit ransomware attack (May-June 2023). Serco identified 8 NH residents whose names and government IDs may have been accessed. Serco notified residents on Aug 1, 2023, and offered credit monitoring.
- Massachusetts State AGas victim2023-08-02
Serco, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-02. 73 Massachusetts residents were affected. The report records the breach type as electronic.
- California State AGas victim2023-08-02
Serco, Inc. reported a data breach on May 31, 2023, involving unauthorized access to employee personal information via a ransomware attack on a third-party platform. Affected data may include names, SSNs, DOBs, addresses, emails, and health benefit info. No evidence of misuse. NortonLifeLock monitoring provided.
- Maine State AGas victim2023-08-02
Serco, Inc. reported an external system breach (hacking) occurring on May 31, 2023, discovered on July 3, 2023. The incident affected 10,140 individuals, including 39 Maine residents. Personal information acquired included names and Social Security Numbers. Serco provided written notification on August 1, 2023, and offered one year of complimentary identity theft protection and credit monitoring through NortonLifeLock.
- Indiana State AGas victim2023-08-01
Serco, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-31 and was reported on 2023-08-01. 39 Indiana residents were affected. 10,140 individuals affected in total.
- Montana State AGas victim2023-08-01
Serco, Inc. notified Montana residents that unauthorized access occurred to email accounts and text message data. The incident involved the misuse of valid credentials. Serco is offering one year of complimentary credit and identity theft monitoring via NortonLifeLock. No evidence of misuse was found at the time of notification.
- GLOBALLeak Siteas victim2020-10-25
- Massachusetts State AGas victim2016-05-05
Serco Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-05-05. 1 Massachusetts residents were affected. The report records the breach type as electronic.