Diligent Corporation notified consumers that Steele Compliance, a subsidiary acquired in Feb 2021, suffered unauthorized network access starting May 21, 2022. The incident was contained by May 24, 2022, but data exfiltration was confirmed later when files were posted externally. Affected data included PII and government IDs. Diligent engaged outside experts, enhanced security controls, and provided 24 months of credit monitoring.