Puma has reportedly suffered a data breach following the recent Kronos ransomware attacks. According to reports, the attackers managed to steal the personal information of thousands of Puma employees and their dependents from the Kronos Private Cloud (KPC).
The information came to the fore through the data breach notifications filed with several attorney generals' offices earlier in February. A letter by Kronos written to the victims of the data theft on February 3 also elaborates on the data breach. The letter explains that Kronos, after performing a comprehensive review of the situation, found that some of the personal information of several Puma employees was among the stolen data.
The breach was discovered by Kronos on January 7, 2022, and notified Puma of the incident on January 10. It didn't, however, mention the total number of Puma employees affected by the data breach in its notification to the firm. This information was provided to the Office of the Main Attorney General.
As per the shared details, the ransomware attack led to data theft of a whopping 6,632 Puma employees.
Kronos mentioned the Social Security numbers of Puma employees to be one of the data points stolen during the attack. Other impacted data was the information provided by Puma to Kronos "in connection with the services" it provides to PUMA. In response to a report of the data theft by Bleeping Computers, Puma's Senior Head of Communications Kerstin Neuber confirmed that no Puma customer data was impacted by the ransomware attack.
Kronos is expectedly following a rapid mitigation strategy against the attack. In addition, the affected users were offered two years of free Experian IdentityWorks membership, which also includes "credit monitoring, identify restoration, and identity theft insurance," the report mentions.
