Breachesby GlyphDISA Global Solutions
Disclosed Feb 21, 20253,332,750 affectedConfirmed
Employee screening firm DISA says hacker stole data of 3.3M people
DISA, which runs drug tests and background checks, said a hacker was in its network from February 9 to April 22, 2024 and took information on more than 3.3 million people, including Social Security numbers, financial account data and ID documents.
What is known
| People affected | 3,332,750 (as reported by the organization) |
|---|---|
| Disclosed | Feb 21, 2025 |
| Discovered | Apr 22, 2024 |
| Happened | Feb 9, 2024 |
| Attack | Hacking |
| Data exposed | NamesGovernment IDsHealthInsuranceSocial Security numbersFinancialPayment cards |
| Sector | Data brokers · US |
| Status | Confirmed |
Sources
California Attorney General breach notice: DISA Global SolutionsWashington Attorney General breach notice: DISA Global SolutionsNotice letter filed with the Delaware DOJ: DISA Global SolutionsOregon DOJ breach notice: DISA Global SolutionsUS employee screening giant DISA says hackers accessed data of more than 3M peopleUS drug testing firm DISA says data breach impacts 3.3 million peopleVermont Attorney General: 2025-02-24 DISA Global Solutions Data Breach Notice to ConsumersIndiana Attorney General 2025 data breach report: DISA Global Solutions
Notices filed
History of this record
empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdfby backfillSource
empty to https://ago.vermont.gov/document/2025-02-24-disa-global-solutions-data-breach-notice-consumersby backfillSource
other to databy seedSource
["names","government-id","health","insurance"] to ["names","government-id","health","insurance","ssn","financial","payment-card"]by seedSource
empty to DISA, which runs drug tests and background checks, said a hacker was in its network from February 9 to April 22, 2024 and took information on more than 3.3 million people, including Social Security numbers, financial account data and ID docby seedSource
empty to Employee screening firm DISA says hacker stole data of 3.3M peopleby seedSource
[] to ["names","government-id","health","insurance"]by backfillSource
empty to organizationby backfillSource
empty to 3332750by backfillSource
2025-02-24 to 2025-02-21by backfillSource
unknown to hackingby backfillSource
empty to 2024-04-22by backfillSource
2025-03-10 to 2025-02-24by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.