Breach of Walmart and Volvo event organizer exposes nearly 40K

Nth Degree, an American event manager for numerous Fortune 100 companies, has suffered a data breach. Attackers gained access to the sensitive details of thousands.

Unauthorized parties accessed the company’s systems in December of last year, snooping around for nearly a week, the Nth Degree’s breach notification letter revealed. Information that the company submitted to the Maine Attorney General’s Office revealed that over 39,000 individuals were exposed in the attack.

“We commenced a prompt and thorough investigation into the incident and worked very closely with external cybersecurity professionals experienced in handling these types of situations to help determine whether any personal or sensitive data had been accessed or acquired as a result of this incident,” the company said.

Nth Degree is a major event manager in the American market whose partners include Dell, Microsoft, Volvo, HP, Mercedes-Benz, PepsiCo, Verizon, and many others. For example, the company worked with Walmart at the Consumer Electronics Show (CES), and with other clients at the SuperBowl and RSA Conference.

Nth Degree’s breach notice claims that the investigation revealed that attackers may have gotten their hands on personal data between December 12th, 2024, and December 20th, 2024. While the publicly accessible breach notification letter has the exposed data blacked out, Markovits, Stock & DeMarco, a law firm dealing with data breach class action litigation, claims that attackers accessed:

• Full names
• Social Security numbers (SSNs)

Since the company employs less than 500 people, the exposed individuals could involve temporary staff that Nth Degree hires for specific events, or the company’s clients. We have reached out to the company for a comment and will update the article once we receive a reply.

Exposing full names increases the privacy risks to individuals whose data may have been exposed. Malicious actors use similar data for identity theft, often attempting to set up fraudulent accounts. Additionally, attackers could craft spear phishing campaigns, tailor-made to attract the attention of staff working with large events.

However, Nth Degree’s breach notice claims that the company has no reason to believe that anyone exploited the data for financial fraud and identity theft. At the same time, individuals who may have been exposed will have access to complimentary credit monitoring and identity theft protection services.