Supply chain
⛓ Supply Chain
Current, former and prospective employees of its customers. Third-Party Breach (February 2025)
Primary Source ↗Incident Details
Background check and drug testing provider DISA Global Solutions reports data breach. Houston-based employee screening company DISA Global Solutions says a 2024 data breach exposed the information of more than 3.3 million people. The company, which handles drug and alcohol testing and background checks for thousands of businesses, said Monday in a filing with Maine regulators that the breach affected current, former and prospective employees of its customers. DISA said it discovered the breach on April 22, 2024, and traced the illicit activity back to February 9, 2024. The company labeled it as “hacking” from an external source but did not provide more details. Third-party company: DISA Global Solutions.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- DISA Global Solutions
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2025-02-01 Breach occurred
- 2025-02-25 Publicly disclosed