Incident

US Governmentcontractor Chemonics reports data breach, 263k affected


Learn More

Chemonics, a major international contractor with $1.4 billion in U.S. government contracts is reporting a data breach affecting 263,136 individuals. The company provides critical services focused on food security, healthcare, democracy and governance, trade, and education, primarily through USAID contracts worth billions of dollars over the past decade.

The company discovered suspicious activity on December 15, 2023, but subsequent investigation showed that hackers had maintained access to their systems from May 30, 2023, until January 9, 2024 - a period of over seven months.

The exposed sensitive information includes:

  • Social Security numbers
  • State ID information
  • Passport details
  • U.S. military ID information
  • Health information
  • Biometric data
  • Personal signatures

The nature of the attack is not disclosed. Questions have been raised about the company's delayed notification to victims, which came more than a year after the initial compromise.

In response to the breach, Chemonics is offering credit monitoring services, though access will vary based on the type of personal information compromised for each individual. The company has stated that the incident has been contained and remediated, with no ongoing unauthorized access to their systems.

US Governmentcontractor Chemonics reports data breach, 263k affected