On the morning of March 13, 2024, a significant security incident was identified by Amerlux LLC’s independent IT vendor. This event was quickly determined to be a ransomware attack, initiated by a well-known cybercriminal group. The attack began approximately on March 7, 2024, and continued until the IT vendor successfully isolated Amerlux’s network on March 13, disconnecting all devices to halt the attack.
During the breach, various types of sensitive personal information were potentially accessed. The compromised data includes:
Immediately upon discovery, Amerlux LLC took decisive action to mitigate the effects of the breach. The company's IT vendor, alongside Ra Security, a cybersecurity firm, conducted a thorough investigation and recovery process. Amerlux also updated its antivirus software across all systems and reinforced the security of its network and third-party hosted systems, such as Oracle and Workday, which were confirmed secure.
To further protect affected individuals, Amerlux LLC is offering 24 months of identity theft protection services through IDX, a ZeroFox Company. This service includes credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed ID theft recovery services. Affected individuals are encouraged to enroll by July 22, 2024. For enrollment, please visit IDX Identity Protection Services.
If you suspect that your information was compromised in this breach, it is crucial to act promptly to secure your identity. Here are steps you can take:
Amerlux LLC is a subsidiary of Delta Electronics, Inc., specializing in innovative, energy-efficient lighting solutions for both commercial and residential spaces.
For further details regarding the breach and how to protect yourself, you can access the official notice to consumers provided by Amerlux LLC on the Massachusetts Attorney General's website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.