Express Services suffers data breach; unauthorized access confirmed

Staffing and temporary employment company Express Services, headquartered in Oklahoma City, Oklahoma, notified the Attorney General of Texas about a data breach involving unauthorized access to two company email accounts.

According to the notice, the breach exposed sensitive consumer information, including names, Social Security numbers, driver’s license numbers, financial information, medical information, and health insurance details. Express Services has begun sending data breach notification letters to affected individuals, providing details about the compromised information.

The breach was initially detected on June 21, 2024, when Express Services noticed suspicious activity within a company email account. Following this detection, the company confirmed the security of its email system and launched an investigation. The investigation revealed that unauthorized access occurred between May 7, 2024, and June 20, 2024. The unauthorized party copied certain information from emails and attachments in the affected accounts.

In response, Express Services reviewed the compromised files to ascertain which data was leaked and identify the impacted individuals. The data breach notification letters sent to affected individuals on September 13, 2024, outline the compromised information.

Founded in 1983, Express Services operates across the United States, Canada, South Africa, Australia, and New Zealand. It places approximately 500,000 people annually and generates around $4.1 billion in revenue. The company operates hundreds of franchised locations and employs over 20,000 people.