Artech artech.com Artech data breach: what happened and what to do
Artech, an IT staffing firm, was hit by ransomware in January 2020. Reports say about 30,000 current and former employees were affected, with names, addresses, phone numbers, Social Security numbers and birth dates. Artech notified people months later and settled a class action.
View all 13,177 breaches- Breach date
- 5 Jan 2020
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
Artech is a US IT staffing firm. Its notice says an investigation found that an unauthorized party had access to certain Artech systems between January 5 and 8, 2020. Press reports tied the attack to ransomware and said files from it were posted online in January, before the company's notice went out.
Who and what
Reporting puts the number of current and former employees affected at about 30,000. Those reports say the files held names, addresses, phone numbers, Social Security numbers and dates of birth. State filings describe the data a little differently: Washington's list shows 1,664 residents notified and mentions Social Security numbers and financial data, while California's mentions names, Social Security numbers and medical information. Treat these as overlapping descriptions of one breach, not different ones.
Late notice
The main complaint was timing. Employees were told in September 2020, around eight months after the attack. Washington's report is dated September 4, 2020.
The settlement
A class action followed. Top Class Actions reports that Artech settled, with payments of up to $10,000 per person for documented losses, out-of-pocket expense reimbursement and three years of credit monitoring. Final approval came on February 10, 2022 and the claim deadline was February 26, 2022, so check whether you're still eligible.
What it means for you
A Social Security number and date of birth together are what criminals need to open credit in your name, or to file a fake tax return. If you worked for or through Artech around 2020, assume your details were in the files.
Sources checked: bleepingcomputer.com, topclassactions.com, oag.ca.gov
Last verified against the official page:
What to do if you were in it
- 1
Freeze your credit
A credit freeze is free and stops lenders from opening new accounts in your name. Place it separately at Equifax, Experian and TransUnion, as the FTC explains. Lift it only when you apply for credit yourself.
- 2
Check your credit reports
Get your free reports at annualcreditreport.com and look for accounts or inquiries you don't recognize.
- 3
File your taxes early
The IRS advises filing early if your Social Security number may be exposed, which makes a fake return harder to file in your name.
- 4
Expect messages that mention the breach
Criminals use your name, phone number and employment history to make scam emails, texts and calls sound real. Don't click links or call numbers in them. Go to the company's own site, or call the number on your card or statement.
- 5
Report misuse
If someone opens accounts or files claims in your name, report it at IdentityTheft.gov, the FTC's reporting site, which gives you a recovery plan.
Official filings
- Washington Attorney General , filed 4 Sept 2020 : 1,664 people
Timeline
-
The breach happened
-
Reported to the Washington Attorney General
Frequently asked
Was I affected by the Artech breach?
Reports say about 30,000 current and former employees were affected. If you worked for or through Artech around 2020, check for a notice letter or ask the company.
What was exposed?
Reports describe names, addresses, phone numbers, Social Security numbers and dates of birth. State filings also mention financial and medical information.
Is there a settlement?
Yes. Top Class Actions reports a settlement with final approval on February 10, 2022, and a claim deadline of February 26, 2022.
Should I freeze my credit?
Yes. A Social Security number was in the data, so a free freeze at the three bureaus is the FTC's advice.
Sources
- bleepingcomputer.com/news/security/it-staffing-firm-artech-says-ransomware-attack-led-to-data-breach/
- topclassactions.com/lawsuit-settlements/closed-settlements/artech-data-breach-class-action-settlement/
- oag.ca.gov/privacy/databreach/list
- atg.wa.gov/data-breach-notifications
- consumer.ftc.gov/articles/what-know-about-credit-freezes-and-fraud-alerts
- identitytheft.gov/databreach
Something wrong or out of date? Tell us and we'll re-check it.
