VeriSource Services (Texas-based employee benefits and HR administration provider) discovered unusual activity on 28 February 2024. The final breach count was approximately 4 million individuals, though only 55,000 were notified in May 2024 and 112,000 in September 2024 — the majority of victims were not notified until April 2025, over a year after the breach. Exposed data included full names, mailing addresses, dates of birth, gender, and Social Security numbers. At least four federal class action lawsuits filed.