IMA Diligence Services Reports Data Theft Affecting 525,306 People
Summary
IMA Diligence Services reported unauthorized access to a legacy server between Dec. 8–16 and data theft affecting 525,306 people. Genesis claimed responsibility and alleged 700 GB was taken; the company offers 12 months of credit monitoring.
Key points
- IMA Diligence Services reported to Indiana's attorney general that 525,306 people were affected.
- External cybersecurity experts found that unknown attackers accessed a legacy server between Dec. 8 and 16 and copied files.
- Affected data varied by person and included Social Security and driver's license numbers, financial and medical information, and, in some cases, passport or tax identification numbers.
- The Genesis ransomware group claimed responsibility; its allegation that about 700 GB was stolen was not confirmed in the article.
- The company notified law enforcement, began an investigation and is offering affected people 12 months of credit monitoring and identity restoration services.
Article Details
- Victim Organization
- IMA Diligence Services
- Incident Type
- Ransomware-associated data breach involving unauthorized access to a legacy server and copying of files
- Data Types Exposed
- Full names
- Current mailing addresses
- Social Security numbers
- Driver's license numbers
- Bank account numbers
- Credit card numbers
- Medical reports
- Health insurance information
- Passport numbers in some cases
- Tax identification numbers in some cases
- Affected Records
- 525,306 people, as reported to the Indiana Attorney General
- Affected Data Size
- Approximately 700 GB, according to the Genesis Ransomware group
- Operational Impact
- A legacy server managed by an external service provider became unreachable. The company reported that it began an investigation and notified law enforcement. Affected individuals were offered 12 months of credit monitoring and digital identity restoration services.
- Ransom Or Extortion
- Genesis Ransomware group claimed responsibility and added IMA Diligence Services to its Tor-based leak site in late January. The group claimed approximately 700 GB was stolen. No ransom demand was reported.
- Claim Status
- confirmed