Ascendum Machinery experienced a data breach in May 2023, compromising the personal information of current and former employees, including names and Social Security numbers. The breach led to a $300,000 class-action settlement, offering affected individuals credit monitoring services (3 years, $1M identity theft insurance) and cash claims (up to $3,000 for extraordinary losses, $750 for ordinary losses, or $40 as an alternative payment). The lawsuit alleged failure to adequately protect sensitive employee data, though Ascendum denied wrongdoing. The breach exposed employees to identity theft, fraud, and financial risks, requiring them to spend time and resources mitigating the impact. The settlement covers U.S.-based employees who received breach notifications, with claims due by January 15, 2026.
Source: https://www.claimdepot.com/settlements/ascendum-data-settlement
Ascendum Group cybersecurity rating report: https://www.rankiteo.com/company/ascendumgroup
"id": "ASC3912339112625",
"linkid": "ascendumgroup",
"type": "Breach",
"date": "5/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'name': 'Ascendum Machinery', 'type': 'Company'},
{'location': 'United States',
'name': 'Current and former employees of Ascendum '
'Machinery (U.S. residents)',
'type': 'Individuals'}],
'customer_advisories': 'Affected individuals notified via official settlement '
'notice with Notice ID and Confirmation Code',
'data_breach': {'data_exfiltration': 'Likely (data exposed in breach)',
'personally_identifiable_information': ['Names',
'Social Security '
'numbers'],
'sensitivity_of_data': 'High (includes Social Security '
'numbers)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)']},
'date_detected': '2023-05-27',
'description': 'Current and former employees of Ascendum Machinery had their '
'personal information compromised in a May 2023 data breach. '
'The company agreed to a $300,000 settlement to resolve a '
'class action lawsuit alleging inadequate protection of '
'personal data, including names and Social Security numbers. '
'Affected individuals may claim up to $3,000 in compensation '
'and credit monitoring services.',
'impact': {'brand_reputation_impact': 'Class action lawsuit and settlement '
'indicate reputational damage',
'data_compromised': ['Names', 'Social Security numbers'],
'financial_loss': {'attorneys_fees': 'Up to $200,000',
'claimant_payouts': {'alternative_cash_payment': '$40 '
'per '
'claimant',
'extraordinary_losses': 'Up '
'to '
'$3,000 '
'per '
'claimant',
'ordinary_losses': 'Up to '
'$750 '
'per '
'claimant '
'(including '
'$100 '
'for '
'lost '
'time)'},
'class_representative_award': 'Up to $5,000',
'credit_monitoring_cost': 'Determined by number '
'of claims filed',
'settlement_amount': '$300,000'},
'identity_theft_risk': 'High (Social Security numbers exposed)',
'legal_liabilities': '$300,000 settlement, potential regulatory '
'scrutiny'},
'investigation_status': 'Settled via class action lawsuit; claims processing '
'ongoing until Jan. 15, 2026',
'post_incident_analysis': {'corrective_actions': '$300,000 settlement, credit '
'monitoring services for '
'affected individuals',
'root_causes': 'Alleged failure to adequately '
'protect personal information'},
'references': [{'source': 'Class Action Settlement Notice'},
{'source': 'Settlement Administrator: Ascendum Machinery '
'Settlement Administrator, 1650 Arch St., Suite '
'2210, Philadelphia, PA 19103'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit settled for '
'$300,000'},
'response': {'communication_strategy': 'Notice sent to affected individuals; '
'class action settlement process '
'established'},
'stakeholder_advisories': 'Notice sent to affected employees; settlement '
'administrator established for claims',
'title': 'Ascendum Machinery $300,000 Data Breach Settlement',
'type': 'Data Breach'}