HR firm discloses data breach

StaffScapes, a Colorado-based human resources (HR) services company, said that an unauthorized party gained access to its environments following an e-mail compromise.

The company filed a notification with the Maine Attorney General’s Office, saying that personal or other sensitive information might have been exposed to threat actors.

Based in Colorado, StaffScapes offers companies a variety of HR services - from payroll to benefit packages and worker compensation administration.

It said names or other personal identifiers, along with Social Security numbers, might have been exposed.

“Once the incident was discovered we quickly took action to minimize risks, including securing the compromised systems and initiating an investigation into the unauthorized access. We are remaining vigilant, reporting any suspected phishing e-mails, and will continue to screen e-mails carefully to avoid a similar incident in the future,” StaffScapes said.

The company also conducted what it called a mass password reset and reinforced two-factor authentication.

Over 4,500 people were affected by the breach that occurred this February.