Manpower staffing agency reports ransomware attack, data breach exposing 145K people
Learn More
Manpower, one of the world's largest staffing companies, is reporting a data breach that exposed personal information of 144,189 individuals in one if its franchises. The data breach was caused by a ransomware attack that occurred between December 29, 2024, and January 12, 2025.
The incident was detected on January 20, 2025, when the company was investigating an IT systems outage at its Lansing, Michigan office. The investigation concluded that "an unknown actor gained unauthorized access to our network between December 29, 2024 and January 12, 2025 and potentially acquired certain files, some of which may have contained certain individuals' personal information".
Exposed data includes:
- Passport scans
- IDs and driver's licenses
- Social Security numbers
- Names and addresses
- Contact information
- Test results
- Years of corporate correspondence
- Financial statements
- HR data analytics
- Confidential contracts and non-disclosure agreements
- Corporate bank statements
- Spreadsheets detailing employees' hours and worksites
The company notified the affected individuals on July 28, 2025, more than six months after the initial discovery.
Manpower is working with the FBI to hold the attackers accountable. The company is also offering affected individuals free credit monitoring and identity theft protection services.
