Canon Business Process Services

Canon Business Process Services (CBPS) is a provider of business process outsourcing solutions headquartered in the United States of America. The organisation delivers outsourced administrative and operational functions to client organisations across various sectors. Its service portfolio includes the processing of documents such as forms, records, and applications that contain personal and financial information. CBPS has been engaged as a service provider for General Electric (GE), managing certain back‑office tasks on behalf of the company. This relationship was highlighted in a 2020 cybersecurity incident that affected an email account used by CBPS. The incident involved unauthorized access to emails containing sensitive employee and beneficiary data belonging to GE.

The breach exposed direct deposit forms, identification records, tax documents, and benefit applications, compromising names, Social Security numbers, bank account details, passport numbers and other personally identifiable information. Following the disclosure, CBPS offered impacted individuals complimentary identity protection and credit monitoring services for a period of two years. GE confirmed that its own internal systems were not compromised in the incident. GE also established a dedicated support line to assist those affected by the breach. The event underscores CBPS’s role in handling confidential personal data on behalf of its clients. Consequently, the organisation’s operations are subject to data protection expectations and incident response obligations typical of business process service providers.