December 5, 2024 at 07:01AM
Chemonics International has notified over 260,000 individuals about a data breach compromising personal information, including names, addresses, and Social Security numbers. Discovered on December 15, 2023, investigators found attackers had accessed data from May 2023 to January 2024. Chemonics is offering 24 months of free identity protection services.
### Meeting Notes Takeaways
1. **Data Breach Notification**: Chemonics International is notifying over 260,000 individuals about a personal information compromise stemming from a data breach.
2. **Organization Overview**: Chemonics is an international development company headquartered in Washington, D.C., involved in various sectors including economic growth, education, health, and governance across multiple countries.
3. **Breach Timeline**:
– Discovered: December 15, 2023
– Attack Duration: May 2023 to January 2024
4. **Incident Response**: Upon identifying suspicious activity, Chemonics implemented response protocols, which included:
– Password resets
– Disabling impacted user accounts
5. **Compromised Information**:
– Personal information includes names, addresses, email addresses, dates of birth, driver’s license and ID information, and Social Security numbers.
– Financial and health information, along with account credentials and biometric data, were also compromised.
– Chemonics has no evidence of misuse of the compromised information.
6. **Security Enhancements**: Following the incident, Chemonics has taken steps to enhance security measures, including:
– Strengthening email security
– Implementing multi-factor authentication
– Deploying additional endpoint security solutions
– Blocking suspicious traffic
7. **Affected Individuals**: 263,136 people have been affected by the breach, as reported to the Maine Attorney General’s Office.
8. **Support Measures**: Chemonics is providing those affected with 24 months of free identity protection and credit monitoring services.
This summary captures the essential details and actions taken following the data breach incident at Chemonics International.