Marshall Medical Center (MMC) notified employees of a data breach involving its payroll vendor PaperlessPay. On February 18, 2020, an unknown actor accessed PaperlessPay's database containing MMC employee payroll data including names, addresses, pay/withholdings, and Social Security numbers. DHS alerted PaperlessPay on February 19, 2020, and MMC was notified on March 20, 2020. A joint DHS/FBI investigation is ongoing. PaperlessPay rebuilt its infrastructure; MMC is transitioning to Workday payroll.