CBIZ, a major player in the business services sector, has disclosed a significant data breach affecting around 36,000 clients. The breach, which occurred between June 2 and June 21, 2024, resulted from an unauthorized party exploiting a vulnerability in one of CBIZ’s web pages. The company became aware of the incident on June 24, prompting an immediate investigation with the assistance of cybersecurity professionals to determine the full scope of the breach.
The compromised data includes highly sensitive information such as names, contact details, Social Security numbers, dates of birth, and details related to retiree health and welfare plans. This data theft has raised concerns among clients, many of whom rely on CBIZ for financial, insurance, and business advisory services. CBIZ, which operates over 120 offices across the United States and employs approximately 6,700 individuals, has assured clients that it is taking the breach very seriously.
To address the situation, CBIZ has notified affected clients and provided guidance on protecting themselves from potential misuse of their information. The company is offering a two-year credit monitoring and identity theft protection service to impacted individuals. Additionally, clients are advised to place a credit freeze and add a fraud alert to their credit reports as preventive measures. These steps are intended to help mitigate the risks associated with the breach and safeguard client information from potential future threats.
CBIZ has emphasized its commitment to enhancing its security infrastructure to prevent similar incidents in the future. The company is working closely with cybersecurity experts to identify and rectify vulnerabilities within its systems. As it continues to address the fallout from this breach, CBIZ is dedicated to ensuring the protection of client data and restoring trust in its services.
Reference: