USA Hoist Company, Inc./Mid-American Elevator/Mid-American Equipment

"What Happened: A server used by USA Hoist Company, Inc., Mid-American Elevator Company, Inc., and Mid-American Elevator Equipment Company, Inc. to store employee and vendor information was subject to a ransomware attack by the hacker group called "the Dark Overlord." We discovered the attack on the morning of Tuesday, October 17, 2017, when we could not access certain of our data systems as a result of the breach. On Thursday, October 19, 2017, the FBI visited our offices to inform us that we may become the subject of a such an attack, but by that time the attack had already occurred.What Information was Involved: The information breached contained employee names, mailing addresses, cancelled checks for employee direct deposits, direct payment account numbers for employees and vendors, non-union member employee health insurance applications, and/or employee Social Security numbers. To our knowledge, other information (bank account PIN, security codes, etc.) was not breached."