IMA Diligence Services is notifying over 525,000 individuals that their personal information was stolen in a data breach.
The incident, the company says, was identified in mid-December after a legacy server managed by a third party became inaccessible.
“Upon discovery, we notified law enforcement and promptly commenced an investigation to confirm the nature and scope of this incident,” an incident notice on the company’s website reads.
Working with external cybersecurity experts to investigate the data breach, IMA Diligence Services discovered that the attackers accessed the server between December 8 and December 16 and exfiltrated certain files.
After reviewing the stolen data, the company determined that it included personal information such as names, addresses, Social Security numbers, and driver’s license numbers.
