USA DeBusk Data Breach Affects 18,067, Exposing Personal and Health Information
Summary
USA DeBusk reported a ransomware attack involving unauthorized access around Sept. 5, 2025. A review found personal and health information of 18,067 people affected; the company is offering two years of identity monitoring.
Key points
- USA DeBusk said attackers gained unauthorized access to its computer systems on or around Sept. 5, 2025.
- Ransomware group Embargo claimed the attack on Sept. 20 and said it obtained 2 TB of sensitive data, threatening to publish it; this is the group’s claim.
- After reviewing affected files, the company determined they contained personal and protected health information.
- The breach affected 18,067 people, including 10,581 Texas residents and 428 Indiana residents.
- Potentially exposed information included Social Security and other government ID numbers, financial and medical information, usernames and passwords, and contact details.
- USA DeBusk reported the breach to authorities in four states on Aug. 10, 2026, and is offering affected individuals two years of identity monitoring through Kroll.
Article Details
- Victim Organization
- USA DeBusk LLC
- Incident Type
- Ransomware attack involving unauthorized access to computer systems
- Incident Date
- 2025-09-05
- Disclosure Date
- 2026-08-10
- Data Types Exposed
- Names
- Contact information
- Dates of birth
- Government-issued identification numbers
- Financial information
- Usernames and passwords
- Medical information
- Health-related information
- Health insurance details
- Affected Records
- 18,067 individuals
- Affected Data Size
- Embargo claimed it obtained 2 TB of data; this amount was not independently confirmed in the article.
- Operational Impact
- The company's computer systems were compromised. No further operational disruption was reported.
- Ransom Or Extortion
- Embargo claimed responsibility and threatened to publish the data within two to three days. The article does not report whether the data was published or whether a ransom was demanded or paid.
- Claim Status
- confirmed
Threat Actors
Vendors
Countries
Industries
Industrial cleaningUSA DeBusk LLC, a leading provider of industrial cleaning and infrastructure services in the oil and energy sector, disclosed a data breach involving a ransomware attack that compromised its computer systems.Infrastructure servicesUSA DeBusk LLC, a leading provider of industrial cleaning and infrastructure services in the oil and energy sector, disclosed a data breach involving a ransomware attack that compromised its computer systems.Oil and energyUSA DeBusk LLC, a leading provider of industrial cleaning and infrastructure services in the oil and energy sector, disclosed a data breach involving a ransomware attack that compromised its computer systems.