On September 12, 2024, The Maids International LLC (TMI) filed a notice of a data breach with the Massachusetts Attorney General after discovering that its systems had been compromised in a cyberattack. The breach exposed sensitive consumer data, including names, Social Security numbers, dates of birth, driver’s license numbers, passport numbers, phone numbers, and protected health information. In response, TMI began sending notification letters to affected individuals, providing them with details of the incident and advising them of the potential risks associated with the breach.
The breach was traced back to suspicious activity detected on January 22, 2024, which prompted TMI to disconnect its network and reset all passwords as a precautionary measure. The company also sought the help of third-party cybersecurity experts to investigate the incident. After an extensive investigation, it was confirmed on April 18, 2024, that unauthorized access had occurred, allowing the attacker to access certain confidential files containing personal consumer information.
Following the confirmation of the breach, TMI conducted a review of the compromised files to identify the individuals affected and determine what data had been exposed. By May 24, 2024, the company had completed its review, confirming that a range of personal data, including Social Security numbers and health information, had been compromised. TMI then began sending out data breach notification letters to all individuals whose information had been affected by the incident.
The Maids International, established in 1979 and based in Omaha, Nebraska, provides cleaning services across over 600 markets in the United States and Canada. As a franchise, TMI operates through 200 unique locations and generates approximately $70 million in annual revenue. The company is committed to addressing the breach and safeguarding the personal data of its customers by offering credit monitoring services to those impacted by the breach.
Reference: