TRC Talent Solutions ransomware breach exposed 158,593 job seekers

TRC Staffing Services, the Atlanta-based agency that operates as TRC Talent Solutions, began notifying people in late May 2024 that their names and Social Security numbers had been taken in a cyberattack on its network.

According to the company's notice, an unauthorized party had access to certain systems between 25 March and 12 April 2024. TRC said it identified suspicious activity on or about 12 April, when files on its systems were found encrypted. A review completed on 9 May 2024 determined which individuals were affected, putting the total at 158,593.

Comparitech reported that the BlackSuit ransomware group claimed responsibility for the attack. TRC did not publicly disclose whether a ransom was demanded or paid. Ransomware tracking site Ransomware.live recorded BlackSuit's leak site listing for TRC on 6 May 2024, roughly three weeks before the notifications went out, with a leak screenshot attached.

TRC offered affected individuals a year of complimentary credit monitoring and identity restoration services. Several plaintiffs' firms announced investigations within days, and a proposed class action, Burke v. TRC Staffing Services, was filed in federal court in Georgia on 31 May 2024. The complaint alleged that TRC failed to implement adequate cybersecurity measures, that it waited more than a month after detecting the incident to notify victims, and that the credit monitoring on offer was inadequate given the lasting risk of identity theft.