Veros Credit Data Breach

NOTICE: If you received a NOTICE OF DATA BREACH letter from Veros Credit, contact the Arnold Law Firm at (916) 777-7777 to discuss your legal options, or submit a confidential Case Evaluation form here.

numbers on side of a wall with faucetOn or about December 5, 2022, Veros Credit (“Veros”) sent a Notice of Data Breach Letter (“Breach Letter”) to individuals informing them their personally identifiable information (“PII”) was exposed through a ransomware attack perpetrated by cyberthieves/hackers (“data breach”).

According to the Breach Letter, hackers first gained access to Veros’s systems on December 10, 2021. The PII stolen by the hackers consisted of, including, but not limited to, Social Security numbers, driver’s license or state identification numbers, financial account numbers or debit/credit card numbers (in combination with security code, password, or PIN from the account), passport numbers, usernames and passwords, and health insurance information.

Although Veros learned of the data breach on December 10, 2021, it waited nearly 12 (twelve) months to provide notice to victims despite knowing on the very day the cyber-attack occurred that it was a ransomware attack. In the Breach Letter, Veros informed victims, Veros had “no reason to believe anyone’s information has been misused.”

Veros is a large financial services provider headquartered at 2333 N. Broadway Santa Ana, California 92706. Last year it realized approximately $43 million in revenue. The data of over 52,281 individuals was compromised by this data breach. If you received a Breach Letter from Veros, you were impacted by the data breach.

Veros has offered data breach victims 12 months of IDX credit and identity monitoring, but the deadline for victims to enroll is March 5, 2023.

WHAT INFORMATION IS INVOLVED?
According to Veros, the following information was exposed:

  • Social Security numbers
  • Driver’s license or state identification numbers
  • Financial account numbers or debit/credit card numbers (in combination with security code, password, or PIN from the account)
  • Passport numbers
  • Usernames and passwords
  • Health insurance information

This information is called your Personally Identifiable Information (“PII”). It tells others about you and is considered part of your identity. Businesses are required to secure this information or risk facing statutory penalties, among other legal penalties. Stolen PII can be used by identity thieves to engage in fraudulent activity using your identity.

The best way to protect yourself after a data breach is to sign up for credit and identity protection services as soon as possible. California offers extra protections and legal rights to its residents through the California Consumer Privacy Act (“CCPA”).

NOTICE: If you received a NOTICE OF DATA BREACH letter from Veros Credit contact the Arnold Law Firm at (916) 777-7777 to discuss your legal options, or submit a confidential Case Evaluation form here.