Aramark reports data breach of their payroll site
Take action: Another almost expensive lesson that using MFA is crucial these days. People almost had their salaries stolen.
Learn More
Aramark reports a data breach after discovering that hackers had gained unauthorized access to confidential employee information. Founded in 1936 and based in Philadelphia, Pennsylvania, Aramark provides food, uniform, and facility services across various sectors, including education, healthcare, and hospitality.
The breach occurred after an attacker created a fake website resembling Aramark's site to trick employees into providing their login credentials, which were then used to access the employees' myPay accounts. Aramark myPay is an online platform that provides Aramark employees with secure access to their payroll-related information,
Aramark initiated an investigation to identify which data was compromised and which employees were impacted. The unauthorized party aimed to alter direct deposit information to misdirect employees' pay but also accessed other personal data.
The breach exposed sensitive details, including:
- Names,
- Addresses,
- Direct deposit information,
- Social Security numbers.
The number of affected individuals is not disclosed.
The company began notifying affected individuals on September 10, 2024, detailing the nature of the information compromised and offering guidance on how to protect themselves against potential fraud or identity theft.
