JASCO Applied Sciences Reveals Employee Data Affected in Security Breach

Silver Spring, Maryland-based JASCO Applied Sciences reported that in July, cyber criminals infiltrated its internal systems, compromising and gaining access to the personal information of its current and former staff.

 

Headquartered in Dartmouth, Canada, JASCO is an international leader in underwater acoustics, delivering consulting services and specialised equipment to evaluate and reduce underwater noise pollution. Their expertise includes acoustic modelling, passive acoustic monitoring, and environmental impact assessments, supporting sectors such as oil and gas, marine construction, and defence.

 

In a data security incident notice filed with the Office of Maine Attorney General, JASCO said that on July 21, it identified unauthorised access within its internal network. The company immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

It also took steps to secure the affected systems including taking them offline and notified relevant law enforcement authorities about the same.

 

“At the time of the incident, we had no reason to believe that any personal information was involved. However, on or around October 20, 2025, we became aware that some personal information had been acquired,” JASCO said.

 

The compromised data included names, addresses, phone numbers, email addresses,  dates of birth, bank account numbers, Social Security numbers, tax information, license numbers and more.

 

While JASCO found no evidence of the compromise data being misused, it has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general. 

 

It has also offered two years of complimentary identity protection and credit monitoring services through Equifax to all affected individuals.

 

 

 

The Rhysida ransomware group has taken credit for the cyberattack, adding JASCO to its data leak site as one of its victims. The group said it has obtained confidential company data and threatened to release it unless JASCO pays a ransom of 10 bitcoin.