American cleaning firm Prestige Maintenance hit by major data breach

American commercial cleaning company Prestige Maintenance said it suffered a significant data security incident earlier this year that compromised the sensitive personal data of more than 65,000 individuals.

 

Headquartered in Plano, Texas, Prestige Maintenance provides scalable janitorial and facilities maintenance services across Chicago, Dallas, Kansas City, and St. Louis.

 

In a data security incident notice filed with the Office of Maine Attorney General, Prestige Maintenance said that on May 13, it identified a data security incident. The company immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

The company also took steps to contain the incident, secure the affected network and notified relevant law enforcement authorities about the same.

 

“We learned of unusual activity in a segment of our cyber environment on January 17, 2025, and immediately started an investigation, engaging independent experts to assist. We later learned that some of our files had been accessed without authorisation,” Prestige Maintenance said. 

 

The compromised data included names and other personal information including Social Security Numbers. The filing with the Maine state regulator also states that the company has identified at least 65,452 individuals impacted by the incident.

 

Prestige Maintenance has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general.

 

It has also offered one year of complimentary identity protection and credit monitoring services through IDX to all affected individuals.

 

 

 

 

While Prestige Maintenance did not disclose details of the security incident, the Medusa ransomware group claimed responsibility for the cyber attack and listed the organisation as a victim on its data leak site. The group said it had stolen confidential data from the cleaning company and gave it 8 days to pay a ransom of $1.2 million. 

 

Prestige Maintenance did not comment on Medusa’s claims or its decision regarding the ransom payment.