OHL North America

OHL North America disclosed that a third party accessed its systems between March 18 and April 8, 2021, and exfiltrated employee files containing names, addresses, SSNs, and bank account information. The incident was discovered in the week of March 14, 2021. OHL engaged a third-party consultant, reported to law enforcement, and is providing 24 months of credit monitoring to affected employees. The investigation is ongoing.

OHL North America experienced a ransomware attack between March 18 and April 8, 2021. The company prevented file encryption but confirmed that certain files were exfiltrated. The breach affected 7,756 individuals, including one Maine resident, compromising names and Social Security Numbers. OHL notified affected individuals on May 4, 2021, and offered 24 months of credit monitoring and identity theft protection through Experian.

OHL North America notified the New Hampshire Attorney General of a cybersecurity incident discovered in March 2021. A third party accessed OHL's systems and attempted to encrypt files, but OHL prevented encryption and removed the actor. The actor subsequently exfiltrated employee files containing PII, SSNs, and bank account information. Five New Hampshire residents were affected. OHL engaged forensic consultants, notified law enforcement, and provided 24 months of credit monitoring to affected employees. Notification to residents began May 4, 2021.