Data theft at CBIZ

CBIZ Benefits & Insurance Services (CBIZ) is one of the largest providers of financial and accounting, insurance and advisory services in the United States, headquartered in Cleveland, Ohio, with more than 120 offices and more than 7,000 employees.

On 24 June, CBIZ discovered unauthorised access by a third party to sensitive information in several of its databases. CBIZ immediately activated its cybersecurity teams and launched an investigation which found that the attackers had exploited a vulnerability that allowed them to acquire data from June 2nd to June 21st, 2024.

The data stolen varies from customer to customer, but can include name, social security number, contact information, date of birth or date of death. The company has provided legal assistance and compensation to those affected and is working with law enforcement agencies to continue the investigation.