🐻California State AGFirst filing
Filed Dec 3, 2021bd_cfa2089146ff0aa2
Keolis Transit America, a subsidiary of Keolis North America, disclosed a data breach involving a physical USB thumb drive found in a laundromat. The drive contained spreadsheets with personal information of current and former employees, including names, addresses, SSNs, financial account numbers, and limited medical data (pregnancy status, COVID test results). The incident occurred between January 4, 2021, and May 23, 2021. Keolis engaged forensic experts and offered 12 months of identity monitoring services via Kroll.