Puma data breach affects nearly half of firm's workforce after Kronos ransomware attack

Sportswear manufacturer Puma has reportedly suffered a data breach after Kronos ransomware attack. attackers stole personal information of Puma employees and ir dependents from Kronos Private Cloud (KPC), Bleeping Computer reported. data breach notification of Puma has been filed with several attorney general offices in February.

Following attack, a Kronos customer affected in incident told Bleeping Computer that y h to make use of paper and pencil to cut checks and monitor timekeeping. letters have been sent to victims of data ft on February 3. In letter, it is explained that Kronos was performing a comprehensive review of affected environment to find wher personal information of several Puma employees was among data that h been unauthorizedly accessed.  Kronos on 7 January 2022 confirmed that some of personal information was among stolen data and Puma h been informed about incident on 10 January 2022, as per Bleeping Computer report.

No customer data affected 

data breach has not mentioned number of Puma employees who have been affected by data-stealing during attack, however, as per report, almost half of its employees h been affected. information regarding stolen data h been provided to Office of Main Attorney General. According to data shared with Office of Maine Attorney General, ransomware attack led to data ft of 6,632 people. company has revealed that documents stolen during Kronos ransomware attack include Social Security Numbers in filings with same office, as per news report. people affected by data breach have been given two years of free Experian IdentityWorks membership, which includes credit monitoring, identify restoration and identity ft insurance. Kerstin Neuber, Puma's Senior He of Communications has informed that no Puma customer data was affected in data breach. 

Image: Shutterstock/Representative