Image: Muhammed Ensar via Pexels [Jonathan Greig](/author/jonathan-greig)December 5th, 2024 Major USAID contractor Chemonics says 263,000 affected by 2023 data breach==========================================================================A large contractor for the U.S. government said a 2023 cyberattack exposed the critical personal information of more than 263,000 people.Chemonics, an international development firm with [$1.4 billion in U.S. government contracts](https://www.usaspending.gov/recipient/71710641-1c0a-d4c7-a593-1c039ee88fa2-C/latest), announced the incident this week — [notifying](https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a14d8095-88f3-4093-bbce-c364c5096c5c.html) regulators in several states and [posting](https://chemonics.com/news/notice-of-security-incident/) a notice on its website.The company said it discovered suspicious activity on December 15 and launched an investigation that revealed hackers had been in its systems since May 30, 2023 and continued to have access until January 9, 2024.Chemonics declined to comment about why the company waited more than a year to notify victims but said the investigation ‘took time to complete.”Due to the sensitive nature of this issue, we’re not able to share a detailed response to your question,’ a spokesperson said. ‘We continue to closely monitor our systems for any unusual activity. There is no ongoing unauthorized access, and the incident has been contained and remediated.’The information stolen includes Social Security numbers, state ID information, passports, U.S. military ID information, health information, biometric data and even signatures.The company said it is providing credit monitoring services but noted that access will be ‘based on the personal information that was potentially impacted.’Filings with regulators in Maine said 263,136 people were impacted.Founded in 1975, Chemonics works in more than 70 countries around the world with about 4,000 experts providing capacity building services focused on food security, healthcare, democracy and governance, trade, education and more.It has [received](https://www.usaspending.gov/recipient/71710641-1c0a-d4c7-a593-1c039ee88fa2-C/latest?section=transactions-over-time) billions through contracts with the Agency for International Development (USAID) over the last decade.At least one law firm [said](https://www.globenewswire.com/news-release/2024/12/05/2992516/0/en/DATA-BREACH-ALERT-Edelson-Lechtzin-LLP-Is-Investigating-Claims-On-Behalf-Of-Chemonics-International-Inc-Customers-Whose-Data-May-Have-Been-Compromised.html) on Thursday that it is investigating a class action lawsuit related to the data breach.Chemonics is [the latest major U.S. government contractor](https://therecord.media/contractor-says-data-on-up-to-10-million-leaked-in-moveit-attack) impacted by a cybersecurity incident. Another major contractor for the U.S. government, ENGlobal Corporation, [warned regulators earlier this week](https://therecord.media/energy-industry-contractor-ransomware-disruption) that a ransomware attack was limiting its operations.In June, two federal contractors [paid a total of $11.3 million](https://therecord.media/federal-contractors-pay-multimillion-settlement) in civil penalties to the U.S. government after admitting they failed to properly test the cybersecurity of a system for providing financial assistance to low-income people in New York during the COVID-19 pandemic. * [](https://twitter.com/intent/tweet?text=Major USAID contractor Chemonics says 263,000 affected by 2023 data breach%20%20@TheRecord_Media)* [](https://www.linkedin.com/shareArticle?mini=true&url=&title=Major USAID contractor Chemonics says 263,000 affected by 2023 data breach)* [](https://www.facebook.com/sharer/sharer.php?u=&src=sdkpreparse)* [](https://www.reddit.com/submit?url=)* [](https://news.ycombinator.com/submitlink?u=&t=Major USAID contractor Chemonics says 263,000 affected by 2023 data breach)* [](https://bsky.app/intent/compose?text=Major USAID contractor Chemonics says 263,000 affected by 2023 data breach ) * [News](/)* [Government](/news/government)* [Industry](/) Get more insights with the Recorded Future Intelligence Cloud.[Learn more.](https://www.recordedfuture.com/platform?mtm_campaign=ad-unit-record) Tags* [data breach](/tag/data-breach)* [Chemonics](/tag/chemonics)* [government contractor](/tag/government-contractor) No previous article No new articles  [Jonathan Greig](/author/jonathan-greig) is a Breaking News Reporter at Recorded Future News. Jonathan has worked across the globe as a journalist since 2014. Before moving back to New York City, he worked for news outlets in South Africa, Jordan and Cambodia. He previously covered cybersecurity at ZDNet and TechRepublic. [](https://twitter.com/jgreigj)
Related Tags:
NAICS: 54 – Professional
Scientific
Technical Services
NAICS: 923 – Administration Of Human Resource Programs
NAICS: 541 – Professional
Scientific
Technical Services
NAICS: 92 – Public Administration
Blog: The Record
Associated Indicators: