MeridianLink
| Primary URL | Location | Industry | meridianlink[.]com |
Country
United States of America
|
Technology
|
|---|
Profile
MeridianLink operates under the alias MeridianLink. The company's headquarters is situated in the United States of America. It is identified by this name in its public filings and in media coverage. The organization is known primarily through these public references.
On November 7, 2023, MeridianLink experienced a cybersecurity incident involving unauthorized access to a non‑privileged user account. The company's security team promptly contained the breach after detection. An internal investigation concluded that threat actors did not access any production platforms. The same investigation found no intrusion into the company's networks. No access to databases or customer systems was discovered during the review. Investigators also determined that no ransomware or malware was deployed as part of the incident. Fewer than seventy‑five consumers had personally identifiable information affected. Notification procedures for those impacted individuals were initiated promptly.
The ransomware group ALPHV/BlackCat claimed responsibility for the data theft, asserting that no encryption was applied. ALPHV/BlackCat filed an SEC complaint alleging that MeridianLink failed to disclose the breach. At the time of the complaint, the relevant SEC reporting rules concerning such incidents had not yet taken effect. MeridianLink reported that the incident caused minimal disruption to its business operations. The organization stated it continues to collaborate with external security experts to strengthen its security posture. Details about the incident were reported by Wiley Law in an alert regarding the SEC filing. BleepingComputer also covered the story, noting the ransomware group's complaint. MeridianLink's own investor relations page provided a summary of the investigation's findings. No information about the company's core products, services, market scope, or employee count was present in the sources. Likewise, details regarding ownership structure, parent or subsidiary relationships were not disclosed. Consequently, this profile is limited to the verified facts outlined above. The description ends here with a complete sentence.
