DISA Global Solutions
Disclosed Feb 21, 20251 year ago3,332,750 affectedConfirmed
Employee screening firm DISA says hacker stole data of 3.3M people
DISA, which runs drug tests and background checks, said a hacker was in its network from February 9 to April 22, 2024 and took information on more than 3.3 million people, including Social Security numbers, financial account data and ID documents.
What is known
| People affected | 3,332,750 (as reported by the organization) |
|---|---|
| Disclosed | Feb 21, 2025 |
| Discovered | Apr 22, 2024 |
| Happened | Feb 9, 2024 |
| Attack | Hacking |
| Data exposed | Names, Government IDs, Health, Insurance, Social Security numbers, Financial, Payment cards |
| Sector | Data brokers · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: DISA Global Solutionsoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: DISA Global Solutionsatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: DISA Global Solutionsattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: DISA Global Solutionsjustice.oregon.gov · Official notice | Official notice |
| US employee screening giant DISA says hackers accessed data of more than 3M peopletechcrunch.com · News | News |
| US drug testing firm DISA says data breach impacts 3.3 million peoplebleepingcomputer.com · News | News |
| Vermont Attorney General: 2025-02-24 DISA Global Solutions Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: DISA Global Solutionsin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Delaware DOJresidents of DE | Feb 21, 2025 | 6,494 |
| Oregon DOJresidents of OR | Feb 21, 2025 | 3,332,750 |
| Indiana AGresidents of IN | Feb 21, 2025 | 61,734 |
| California AGresidents of CA | Feb 24, 2025 | |
| Washington AGresidents of WA | Feb 24, 2025 | 29,481 |
| Researchtotal | Feb 24, 2025 | 3,332,750 |
| Vermont AGresidents of VT | Feb 24, 2025 | |
| California AGresidents of CA | Mar 10, 2025 |
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-02-24-disa-global-solutions-data-breach-notice-consumers · backfill source
- 2026-09-25 · sector: other to data · seed source
- 2026-09-25 · data_types: ["names","government-id","health","insurance"] to ["names","government-id","health","insurance","ssn","financial","payment-card"] · seed source
- 2026-09-25 · summary: empty to DISA, which runs drug tests and background checks, said a hacker was in its network from February 9 to April 22, 2024 and took information on more than 3.3 million people, including Social Security numbers, financial account data and ID doc · seed source
- 2026-09-25 · title: empty to Employee screening firm DISA says hacker stole data of 3.3M people · seed source
- 2026-09-25 · data_types: [] to ["names","government-id","health","insurance"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 3332750 · backfill source
- 2026-09-25 · disclosed: 2025-02-24 to 2025-02-21 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2024-04-22 · backfill source
- 2026-09-25 · disclosed: 2025-03-10 to 2025-02-24 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.