Texas HR outsourcing firm says cyber attack compromised customer data

Houston, Texas-based human resources provider Employer Flexible HR Holdings said it experienced a data security incident that compromised the sensitive personal information of individuals associated with the company.

 

Employer Flexible HR Holdings provides outsourced HR services, such as HR consulting, employee benefits and compliance, to small and medium-sized businesses.

 

In a data breach notice filed with the Attorney General of Massachusetts, Employer Flexible said that on May 23, it identified suspicious activity in its internal network. The company immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident

It also took steps to secure the affected network and notified law enforcement authorities about the incident. “Based on the investigation, it was determined that certain data on the myHR platform was subject to unauthorised access,” the company said.

 

“Together with third-party specialists, we undertook a comprehensive review of the impacted data to determine the type of information contained therein and to whom that information related. This process was completed on June 26, 2024. We are now notifying those individuals whose information was potentially impacted by the incident,” it added.

 

Employer Flexible said the compromised data included names, dates of birth, Social Security numbers, and health insurance information.

 

While the company found no evidence of the compromised information being misused, it advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and state attorney general.

 

The agency has also offered complimentary identity protection and credit monitoring services through IDX to all affected individuals.