By 
Sportswear manufacturer Puma was hit by a data breach following the ransomware attack that hit Kronos, one of its North American workforce management service providers, in December 2021.
According to the data breach notification filed with several attorney generals' offices earlier this month, the attackers also stole personal information belonging to Puma employees and their dependents from the Kronos Private Cloud (KPC) cloud environment before encrypting the data.
Kronos states that KPC is a secure storage protected from attacks using firewalls, multi-factor authentication, and encrypted transmissions.
It is used as a server facility for hosting Workforce Central, Workforce TeleStaff, Enterprise Archive, TeleTime IP, Extensions for Healthcare (EHC), and FMSI environments.
After the ransomware attack the Kronos customers had to go back to using paper and pencil to cut checks and monitor timekeeping.
After discovering the attack, Kronos has been conducting a comprehensive review of the impacted environment to determine whether any individual’s personal information was subject to unauthorized access or acquisition.
On January 7, 2022, Kronos confirmed that some of the personal information was among the stolen data and PUMA was notified of this incident on January 10, 2022.
It is not mentioned in the breach notification as how many Puma employees had their info stolen during the attack. According to the information provided to the Office of the Maine Attorney General, the ransomware operators acquired data belonging to 6,632 individuals.
Puma also said that the documents stolen during the Kronos ransomware attack include Social Security Numbers in filings with the same office.
All the users affected by this data breach were offered two years of free Experian IdentityWorks membership, which comes with credit monitoring, identify restoration, and identity theft insurance.
Puma, one of the world’s leading sports brands with 14,300 employees worldwide had a sale of €5.23 billion during 2020.
Image Credits : Pestle Analysis
