Dollar Tree Impacted by ZeroedIn Data Breach Affecting 2 Million Individuals

Dollar Tree Impacted by ZeroedIn Data Breach Affecting 2 Million Individuals

November 30, 2023 at 07:54AM

ZeroedIn, a workforce analytics firm, has informed roughly two million people of a data breach in August 2023, compromising personal data, including Social Security numbers, of Dollar Tree and Family Dollar customers and employees. Investigations continue, and legal action may ensue.

Meeting Takeaways:

1. Data Breach Notification: ZeroedIn, a workforce analytics services provider, is notifying approximately two million individuals about a data breach that occurred in August 2023.

2. Breach Discovery and Timeline: The breach was identified on August 8, 2023. Unauthorized access to certain ZeroedIn systems took place between August 7 and 8, 2023.

3. Investigation and Impact: ZeroedIn launched an immediate investigation and found that personal information in some of the accessed or stolen files was compromised.

4. Affected Parties: The data accessed included information related to customers such as Dollar Tree and Family Dollar. Specifically, the incident affected “certain individuals associated with them,” which includes applicants and current and former employees of ZeroedIn’s clients.

5. Type of Compromised Information: The attackers accessed or stole files containing personal details such as names, dates of birth, and Social Security numbers.

6. Reporting and Compliance: ZeroedIn submitted a notification letter to the Maine Attorney General’s Office. The letter confirmed that the compromised data was related to the aforementioned individuals.

7. Scale of Dollar Tree and Family Dollar: Dollar Tree and Family Dollar operate more than 16,600 retail discount stores and 17 distribution centers in the US and Canada, according to Dollar Tree’s latest 10-Q filing.

8. Legal Actions: There is potential for a class-action lawsuit. The law firm Console & Associates, P.C. is investigating on behalf of the impacted individuals.

9. Related Incidents: The notes also mention other data breaches, including ones at the University of Michigan, a situation involving TransUnion, and a hack impacting up to 11 million people at Maximus, a government services firm.

Full Article