Drug-screening biz DISA took a year to disclose security breach affecting millions

DISA Global Solutions disclosed a cybersecurity incident in which attackers stole sensitive records for more than 3.3 million people in February 2024, with the intrusion discovered in April; compromised data may include names, Social Security numbers, government IDs, financial account information, and drug testing/background-check details. The filing and notices suggest the incident could enable extortion of individuals or the company, and observers note the response (deleted files, prevented leaks) is consistent with a ransomware-related intrusion, though ransom payment and full remediation details were not confirmed.