McMenamins told its employees in a memo Dec. 21 that much of their personal information was stolen during a ransomware attack the company suffered on Dec. 12.
The memo, which McMenamins shared with WW, reads in part: “We have determined that the hackers did steal certain business records containing the following categories of employee information: name, address, telephone number, email address, date of birth, race, ethnicity, gender, disability status, medical notes, performance and disciplinary notes, Social Security number, health insurance plan election, income amount, and retirement contribution amounts.”
The memo confirmed much of the 2,700 employees’ worst fears: Loads of their personal information is now being held for ransom by a hacker.
“We are working closing with a team of cybersecurity experts, and we have notified the FBI and are cooperating with their investigation,” the company told employees in the memo. “We had security safeguards in place and a dedicated IT group that works to protect our systems and the information on them. Somehow hackers bypassed our security controls, and we are working to figure out how that happened.”
Employees tell WW they’ve received no update from the company since the Dec. 21 memo announcing much of their information had been stolen.
McMenamins told employees there’s no evidence yet that their information has been fraudulently used. The company is providing free identity and fraud protection to its employees for the time being....
Read Full Story:
https://www.wweek.com/news/business/2021/12/28/mcmenamins-tells-employees-per...