Alltech Consulting Services Data Breach Investigation

Recently, it was reported by an online source that Alltech had experienced a cybersecurity incident impacting the privacy of its data. According to this source, a cybersecurity researcher discovered a non-password-protected database that contained over 2.3 million records belonging to Alltech.¹ The folder labeled as Documents enclosed the PII of an estimated 216k job seekers, including names, phone numbers, email addresses, the last four digits of their SSN, passport numbers, and whether they had a work authorization visa.¹ The records also contained internal notes about their experience, qualifications, and the types of jobs they are looking for.¹ Additionally, some of the records contained employer details such as names, company names, email addresses, phone numbers, and worker information such as salary expectations, work history, and whether they were willing to relocate.¹

According to the source, after discovering the exposed information the researcher attempted to contact Alltech but received no response.  At this time, it is not known how long these documents were exposed to the public or if anyone else may have accessed the database. As of November 13, 2024, Alltech has not publicly acknowledged the data exposure or confirmed whether the incident resulted in a data breach.