La Posada

La Posada, also known by its alias, is headquartered in the United States of America. The organization maintains employee compensation, benefits, and health‑related data, as evidenced by the types of information exposed in a security incident. This indicates that La Posada employs a workforce and administers payroll, direct deposit, and employee benefit programs. The handling of medical information such as drug/TB test results and COVID‑19 vaccination cards suggests the organization also manages occupational health records. While the specific industry or core services of La Posada are not detailed in the available sources, its data practices point to a role that involves human resources administration. The organization’s headquarters location situates it within the United States regulatory environment.

On December 10, 2021, La Posada experienced a malware infection that compromised its IT systems, restricting access to files and email. The breach resulted in unauthorized access to sensitive information affecting both current and former employees. Exposed data included personal identifiers such as names, dates of birth, Social Security numbers, driver’s license numbers, and passport details, as well as financial records like direct deposit information. Additionally, medical data comprising drug/TB test results, explanation of benefits documents, member IDs, and COVID‑19 vaccination cards were compromised. In response, La Posada engaged law enforcement and forensic investigators, issued notifications to the impacted individuals, and initiated a review of its security protocols to prevent similar incidents. The incident underscores the organization’s responsibility to safeguard employee information and its subsequent steps to strengthen cybersecurity measures.