PHH Corporation notified individuals that a temporary worker, who had been indicted for identity fraud unrelated to PHH, may have accessed personal information of current and former employees and applicants. The data accessed included names, addresses, email addresses, telephone numbers, dates of birth, Social Security numbers, and I-9 alien registration numbers. PHH initiated a review of the worker's access and is cooperating with law enforcement. No evidence of data misuse was found. PHH offered 18 months of identity protection services.