Chemonics International, a major international development company and contractor for USAID, has recently disclosed a significant data breach affecting over 260,000 individuals.

The incident, which was discovered on December 15, 2023, involved unauthorized access to the company’s computer network over an extended period.

Timeline And Scope Of The Breach

The unauthorized access to Chemonics’ systems began on May 30, 2023, and continued until January 9, 2024.

Despite the discovery in December, the company only recently completed its investigation and data review process, confirming the affected individuals on October 31, 2024.

Compromised Information

The data breach exposed a wide range of sensitive personal information, including:

  • Names, addresses, and email addresses
  • Dates of birth and Social Security numbers
  • Driver’s license and state ID information
  • Passport and U.S. military ID information
  • Financial and health-related information
  • Usernames and passwords
  • Biometric data
  • Gender and sexual orientation information
  • Signatures

Company Response

Upon discovering the breach, Chemonics took several immediate actions:

  1. Enacted response protocols, including password resets and disabling affected accounts
  2. Launched an investigation with cybersecurity experts
  3. Notified law enforcement authorities

To enhance security, Chemonics has implemented additional measures:

  • Strengthening multi-factor authentication processes
  • Enhancing email security
  • Deploying additional endpoint monitoring and detection tools
  • Blocking suspicious internet traffic

Recommendations For Affected Individuals

Chemonics is advising affected individuals to:

  1. Remain vigilant by reviewing account statements and monitoring free credit reports
  2. Consider temporarily freezing their credit
  3. Be cautious of potential scams related to this incident2

The company is offering 24 months of complimentary access to Equifax Credit Watch Gold for impacted individuals4.

Notification And Support

Chemonics has filed a notice with the Maine Attorney General’s Office and is in the process of notifying all affected individuals.

For those with questions or concerns, Chemonics has set up a toll-free hotline at 1-888-658-8864, available Monday through Friday, 9 a.m. to 9 p.m. Eastern Time (excluding major U.S. holidays).

While Chemonics states that it is unaware of any misuse of the compromised information, the extensive nature of the breach and the sensitive data involved underscore the importance of affected individuals taking proactive steps to protect their personal information and monitor for potential fraudulent activities

LEAVE A REPLY

Please enter your comment!
Please enter your name here