Shub & Johns LLC is currently investigating Aramark Refreshment Services LLC (“Aramark”) for an apparent failure to safeguard sensitive employee information in a data breach that was detected in or around early September 2024. Aramark, a Pennsylvania-based food service provider, discovered that an unauthorized actor not only gained access to private employee data but also gained access to employees’ myPay site in order to change direct deposit information. The bad actor was able to do this by fabricating a website made to look like Aramark’s myPay portal, likely with the intent misleading employees and gather information.

Aramark conducted its own investigation into the breach and delivered notice to impacted consumers and employees on or around September 10, 2024. Aramark has not indicated approximately how many individuals have been impacted by the breach. Consumer information exposed in the breach may vary by consumer or employee, but can include financial and direct deposit information, names, addresses, and social security numbers.

The cybercriminals responsible for the breach may have already obtained and sold the compromised consumer information. In previous data breaches, victims of data theft have noticed identity theft attempts ranging from fraudulent charges on bank accounts or credit cards, medical and/or government services ordered in their name, or their information being posted on the dark web.

Affected by the Aramark Data Breach

Have you recently received a data breach notification from Aramark? If so, we would like to hear from you.  Please complete the contact form on this page or contact us at 610-477-8380 or info@shublawyers.com.