Breach of American HR tech firm exposes nearly 60K

EmCentrix, a Nevada-based HR technology and payroll integration developer, has suffered a data breach, exposing tens of thousands of individuals across the US.

The incident took place in mid-August last year, with attackers accessing or acquiring sensitive data. EmCentrix has informed impacted individuals about the incident in a data breach notice. According to information that the company submitted to the Maine Attorney General’s office, over 59,000 individuals were exposed to the breach.

The incident impacted individuals in at least three States, as the incident was also reported to authorities in California and Montana.

After EmCentrix discovered unauthorized parties snooping inside its systems, the company says it immediately started an investigation, with third-party cybersecurity pros assisting the probe. Nearly a year after the data breach occurred, the investigation revealed that attackers had obtained personal details.

“We undertook a comprehensive review of those files and learned that on June 16th, 2025, some of your personal information was contained within the potentially affected data, which is the reason for this notification,” the company’s notice said.

The publicly accessible EmCentrix notice only reveals that attackers accessed individuals’ names, while other exposed data points are not revealed. Given that EmCentrix provides HR and payroll services, the true extent of the stolen details may be much greater.

Meanwhile, the company said it has “no evidence of the misuse, or attempted misuse, of any potentially impacted information.” At the same time, potentially impacted individuals will be eligible for complimentary identity protection services.