PeopleCheck reports data breach caused by ransomware attack
Learn More
PeopleCheck, an Australian-based background screening provider, is reporting a data breach that compromised personal information processed for clients between June 2024 and June 2025.
The breach was executed via compromised login credentials. The Everest ransomware group publicly claimed responsibility for the attack, announcing on their dark web site that they stole 4.3 GB of SQL data from PeopleCheck's systems. The breach was discovered on June 24, 2025, but the attack probably happened on June 13, 2025. The breach compromised sensitive information, including:
- Client profiles containing
- names,
- email addresses,
- postal addresses,
- phone numbers,
- birth dates,
- passwords,
- profile pictures,
- IP addresses,
- two-factor authentication tokens
- Invoice records containing
- payment details,
- pricing information,
- discounts,
- company identification numbers
- Individuals processed by PeopleCheck on behalf of With Intelligence:
- names,
- email addresses,
- internal reference names,
- dates of birth,
- phone numbers,
- birth cities,
- Social Security numbers,
- gender,
- mother's names,
- share codes
PeopleCheck notified its client With Intelligence Ltd. that their candidates' and employees' data may have been compromised. The number of affected individuals is not disclosed.
The company is offering affected individuals complimentary access to identity monitoring and credit monitoring services for 24 months. Impacted individuals are encouraged to enroll in these services by emailing customercare@peoplecheck.com to receive an activation code. Enrollment must be completed by October 31, 2025.
