YRC Worldwide

YRC Worldwide Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-09-21. 166 Massachusetts residents were affected. The report records the breach type as electronic.

YRC Worldwide Inc. notified the NH Attorney General of a data security incident involving 52 New Hampshire residents. On July 24, 2018, YRC detected a phishing email with a malicious link that allowed an attacker to establish a forwarding rule on an Office 365 account. The attacker accessed an employment-related spreadsheet containing names and social security numbers of current and former employees. YRC engaged forensic investigators, notified law enforcement, and enhanced IT security. Affected individuals are offered two years of credit monitoring and identity protection.

YRC Worldwide notified employees of a phishing attack on July 24, 2018, which led to unauthorized access to email accounts and exfiltration of names and SSNs. YRC engaged forensic investigators and law enforcement, and offered two years of credit monitoring to affected individuals.

YRC Worldwide Inc. filed a data breach notification with the California Attorney General. The breach occurred on July 24, 2018. The provided source document contains only the filing metadata and an empty attachment placeholder; no narrative details regarding the nature of the breach, data types affected, or number of individuals impacted are available in the text.