Sirva Relocation LLC

Sirva Relocation LLC faced a legal challenge after a data breach exposed the Social Security number (SSN) of an employee (Rosalyn Rivera) whose employer had contracted Sirva for relocation services. The breach led to a proposed class-action lawsuit, with the US District Court for the Central District of California allowing Rivera to proceed as a third-party beneficiary under the employer-Sirva contract. The core allegation was that Sirva failed to protect personal information as contractually obligated, resulting in the unauthorized exposure of sensitive employee data. While the article does not specify the scale of the breach (e.g., number of affected individuals) or direct financial harm, the leak of SSNs—a high-value target for identity theft—implies significant reputational and legal risks for Sirva, including potential regulatory scrutiny and financial liabilities from litigation. The case highlights vulnerabilities in third-party vendor data protection, particularly in sectors handling employee relocation where sensitive personal and financial details are routinely shared.

Source: https://news.bloomberglaw.com/litigation/moving-company-fails-to-shake-much-of-worker-data-breach-suit

TPRM report: https://www.rankiteo.com/company/sirva

"id": "sir4892348091525",
"linkid": "sirva",
"type": "Breach",
"date": "9/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'At least one (Rosalyn Rivera, '
                                              'employee of a client company)',
                        'industry': 'Relocation Services',
                        'name': 'Sirva Relocation LLC',
                        'type': 'Corporation'}],
 'data_breach': {'personally_identifiable_information': ['Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High (Social Security numbers)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'description': 'Sirva Relocation LLC faced a proposed class lawsuit filed by '
                'a client’s employee (Rosalyn Rivera) whose Social Security '
                'number was compromised in a data breach. The US District '
                'Court for the Central District of California allowed Rivera '
                'to proceed with a breach of contract claim as a third-party '
                'beneficiary, citing that Sirva’s contract with her employer '
                'required the protection of personal information.',
 'impact': {'brand_reputation_impact': 'Negative (legal proceedings and public '
                                       'disclosure of breach)',
            'customer_complaints': ['Class action lawsuit filed by affected '
                                    'employee'],
            'data_compromised': ['Social Security numbers'],
            'identity_theft_risk': 'High (Social Security numbers exposed)',
            'legal_liabilities': ['Proposed class lawsuit for breach of '
                                  'contract']},
 'investigation_status': 'Ongoing (legal proceedings active as of September '
                         '2023)',
 'references': [{'source': 'US District Court for the Central District of '
                           'California (2023 ruling)'}],
 'regulatory_compliance': {'legal_actions': ['Proposed class lawsuit for '
                                             'breach of contract (allowed to '
                                             'proceed by US District Court)']},
 'title': 'Sirva Relocation LLC Data Breach Leading to Class Action Lawsuit',
 'type': 'Data Breach'}