Breach, Data Security

Over 35K impacted by CSC ServiceWorks breach

Share

Major commercial laundry service provider CSC ServiceWorks had information from 35,340 individuals compromised following a data breach that lasted from September 2023 to February 2024, according to TechCrunch.

Infiltration of CSC ServiceWorks' systems resulted in the exfiltration of individuals' names, birthdates, Social Security numbers, driver's license numbers, contact details, bank account numbers, and health insurance details, said the company in a filing with Maine regulators. While such information may indicate that the breach impacted the company's employees, CSC ServiceWorks has refused to provide more details regarding the nature and extent of the incident. Such a development follows the discovery of a pair of vulnerabilities in its internet-connected laundry machines that could be exploited to enable free laundry cycles, the older of which was ignored by the firm for weeks before being addressed. On the other hand, more details regarding the more recent hardware-level flaw have been presented by security researcher Michael Orlitzky at this year's DEF CON security conference.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.