McMenamins Breach Affected 23 Years of Employee Data
The Oregon-based hospitality and dining business reports the data was compromised in a Dec. 12 ransomware attack.
McMenamins, an Oregon-based operator of restaurants, hotels, movie theaters, concert venues, and other events, has confirmed a December 2021 ransomware attack that compromised employee data going back to Jan. 1, 1998.
Stolen data potentially included names, addresses, phone numbers, email addresses, birthdates, race, ethnicity, gender, disability status, medical notes, performance and disciplinary notes, Social Security numbers, health insurance plan elections, income amounts, and retirement contribution amounts, according to a breach disclosure.
"It's possible that the thieves accessed files containing direct deposit bank account information, as well, but McMenamins does not have a clear indication they did so," the disclosure states.
The company has sent letters describing the personal information stolen and how people can protect their identity and credit to everyone it employed between July 1, 2010, and Dec. 12, 2021, officials wrote. Employees who worked for McMenamins between Jan. 1, 1998, and June 30, 2010, are advised to visit the company's website for support.
McMenamins is offering past and current employees identity and credit protection services; it also has a call center to answer questions about the incident.
Read more details here.
About the Author(s)
You May Also Like
Beyond Spam Filters and Firewalls: Preventing Business Email Compromises in the Modern Enterprise
April 30, 2024Key Findings from the State of AppSec Report 2024
May 7, 2024Is AI Identifying Threats to Your Network?
May 14, 2024Where and Why Threat Intelligence Makes Sense for Your Enterprise Security Strategy
May 15, 2024Safeguarding Political Campaigns: Defending Against Mass Phishing Attacks
May 16, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024