On September 21, 2023, Frax Outsourcing, a subsidiary of TheKey, LLC (“Frax”), filed a notice of data breach with the Attorney General of California after determining that it was the recent victim of a cyberattack. In this notice, Frax explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, Social Security numbers, medical information, addresses, driver’s license numbers, and financial account information. Upon completing its investigation, Frax began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from Frax Outsourcing, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Frax Outsourcing data breach. For more information, please see our recent piece on the topic here.

What Caused the Data Breach Affecting Frax Outsourcing?

The Frax Outsourcing data breach was only recently announced, and more information is expected in the near future. However, Frax’s filing with the Attorney General of California provides some important information on what led up to the breach. According to this source, Frax recently learned that the company had been the victim of a cyberattack. In response, Frax launched an investigation with the help of third-party experts in hopes of determining what, if any, confidential consumer information was compromised.

The Frax investigation revealed that certain employee email accounts, as well as a SharePoint drive, were subject to unauthorized access. It was also confirmed that some of the files that were accessible to the unauthorized party contained confidential consumer information. Frax believes the period of unauthorized access was between November 2, 2022 and November 15, 2022.

After learning that sensitive consumer data was accessible to an unauthorized party, Frax Outsourcing reviewed the compromised files to determine what information was leaked and which consumers were impacted. Frax completed this process on June 19, 2023. While the breached information varies depending on the individual, it may include your name, Social Security number, address, medical information, driver’s license number, and financial account information.

On September 21, 2023, Frax Outsourcing sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About Frax Outsourcing

Frax Outsourcing is a business services company serving the home healthcare industry. Frax is a subsidiary of TheKey, LLC, which specializes in providing elderly care services such as home care, memory care, and end-of-life care services. TheKey operates dozens of locations across the United States. TheKey employs more than 15,000 people and generates approximately $51 million in annual revenue.