Alaska Railroad Corporation

Alaska Railroad Corporation Welfare Benefits Plan reported to HHS on 2023-05-25 a Hacking/IT Incident affecting 3549 individuals. Breached information located on Network Server. The cyber-attack compromised PHI including names, addresses, DOB, driver's licenses, SSNs, claims, diagnoses, and medications. The entity provided credit monitoring and implemented additional safeguards.

Alaska Railroad Corporation experienced an external system breach on December 25, 2022, which was later discovered on March 18, 2023. The breach compromised the names and Social Security numbers of individuals. In response, the company notified the 3 affected Maine residents on April 17, 2023, and offered 24 months of credit monitoring and identity theft protection services through Experian.

Alaska Railroad Corporation reported that on December 25, 2022, a third party gained unauthorized access to its internal network, acquiring personal information of vendors, current and former employees, and their dependents. The incident was discovered on March 18, 2023. The company engaged law enforcement and forensic investigators, implemented additional security measures, and offered 24 months of complimentary Experian IdentityWorks to affected individuals.

Alaska Railroad Corporation reported a data breach to the Montana Attorney General. The breach was reported on 2023-04-17. The breach occurred on 12/25/2023. 62 Montana residents were affected.