Bamboo Rose disclosed a cybersecurity incident discovered on September 27, 2024, involving unauthorized access to its non-production environment between September 20 and 27, 2024. The incident may have exposed personal information including names, SSNs, dates of birth, addresses, and bank account information. Bamboo Rose took systems offline, engaged third-party experts, and notified law enforcement. Affected individuals were offered 24 months of Experian IdentityWorks.