JSP International Group Data Breach Investigation

JSP Group is a global manufacturing company that serves the automotive, HVAC, packaging, sports and a variety of consumer goods markets.² Based in Tokyo, JSP Group was founded in 1962 as Japan Styrene Paper.³ The company’s first global operation, JSP Group’s USA headquarters focuses on the production and sales of expanded polypropylene (EPP) and expanded polyethylene (EPE) and the molded parts.^3,4 With five supporting plants in Michigan, Tennessee, and Pennsylvania, JSP is in Wayne, Pennsylvania.⁴

WHAT HAPPENED?

Recently, JSP reported to the Attorney General of the Commonwealth of Massachusetts that the sensitive personal identifiable information and protected health information in its care may have been compromised. Beyond this, the JSP breach notice does not elaborate on the nature of the security incident that impacted its systems. While the information impacted varies depending on the individual, the type of information potentially exposed includes:

• Name
• Social security number
• Driver’s license and/or government identification number
• Medical information
• Health insurance and/or financial account information

On February 7, 2025, JSP began mailing data breach notification letters to impacted individuals. Based on the breach notices provided to the Massachusetts residents, JSP is providing affected individuals with a list of the information impacted and 24 months of complimentary identity monitoring services. A link to the form breach notification letter that JSP filed with the Attorney General of the Commonwealth of Massachusetts is below.