Cyber Incident Victim: Computer Sciences Corporation
Timeline
Summary
Corporation Service Company (CSC) experienced a data breach when an unauthorized actor accessed a third‑party hosted database and copied files containing personal information such as names, Social Security numbers, government‑issued identification numbers, financial details and dates of birth. After discovering the intrusion, the company secured its network, engaged forensic specialists, completed a review to identify affected individuals and began sending breach notifications. the company offered affected persons twelve months of complimentary credit monitoring through a third‑party provider and set up a dedicated assistance line. A national class‑action law firm has launched an investigation into potential claims arising from the exposure.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
Corporation Service Company detected suspicious activity on its network and promptly initiated a security response, engaging third‑party forensic specialists to investigate. The investigation revealed that an unauthorized actor had gained access to a third‑party hosted database between August 10, 2025 and August 25, 2025, during which certain files were copied and removed. CSC completed its internal file review on July 15, 2026, determining which individuals’ information had been contained in the compromised files. Following this determination, CSC began sending data breach notifications to affected individuals in 2026.
The exposed files included personal data such as full names, Social Security numbers, government‑issued identification numbers, financial information, and dates of birth. CSC indicated that approximately 61 residents of Rhode Island may have been affected, while noting that the total number of impacted individuals nationwide is expected to be larger. No further specifics about the exact total count were disclosed in the source material. The breach involved data stored in a database hosted by a third party, not on CSC’s own infrastructure.
In response to the incident, CSC took immediate steps to secure its network and implemented additional safeguards while reviewing its data privacy and security policies and procedures. The company established a dedicated assistance line at 1-866-898-4668, available Monday through Friday from 8:00 a.m. to 8:00 p.m. Eastern Time, excluding major U.S. holidays. CSC also offered affected individuals twelve months of complimentary single‑bureau credit monitoring, credit report, and credit score services through Cyberscout, a TransUnion company, with enrollment required within ninety days of the notice date. Concurrently, the national class action law firm Edelson Lechtzin LLP announced an investigation into potential legal claims arising from the breach, providing free, confidential case evaluations to those who received a notification.