Florida-based ComplyRight, which offers an array of HR-related data services to small businesses and government organizations, informed Kanawha County officials on Thursday that unauthorized access to its website had occurred, according to Kanawha County Attorney Marc Slotnick.
That breach, according to a notification from ComplyRight, resulted “in the compromise of personal information,” which could include names, addresses, Social Security numbers and email addresses.
While that personal information could have been accessed and viewed during the breach, it is unknown whether the data was “downloaded or otherwise acquired by an unauthorized user,” according to the notification.
ComplyRight said in a post on its website that it initially learned of the issue on May 22.
County employees whose personal data is suspected of having been viewed during the breach will be notified by letter and provided with free credit monitoring and identity theft restoration services for 12 months, according to ComplyRight.
As of late Friday, Slotnick said he was aware of three county employees having received such letters.
According to ComplyRight, fewer than 10 percent of individuals using the company’s HR services were affected by the breach.
©2018 The Charleston Gazette (Charleston, W.Va.) Distributed by Tribune Content Agency, LLC.