USA DeBusk Data Breach: PHI and PII Exposed

USA DeBusk LLC, a leading provider of industrial cleaning and infrastructure services in the oil and energy sector, disclosed a data breach involving a ransomware attack that compromised its computer systems. USA DeBusk has not disclosed the total number of individuals affected by the breach.

USA DeBusk fell victim to a ransomware attack that involved unauthorized access to its computer systems on or around Sept. 5, 2025.

On Sept. 20, 2025, a ransomware group known as Embargo claimed responsibility for the attack on the Tor network. The group stated it had obtained 2 TB of the organization's sensitive data, including contracts, client records, employee personal data and incident reports. The group threatened to publish the stolen data within two to three days.

After an investigation and review of the affected files, which concluded on July 6, 2026, the company determined that the files contained sensitive personal and protected health information of certain individuals.

The types of information exposed varied by individual but included names, contact information (such as postal addresses, email addresses and telephone numbers), dates of birth and government-issued identification numbers (such as Social Security numbers, driver's license numbers and passport numbers), financial data (such as bank account numbers, payment card numbers and other financial account information), usernames and passwords, medical information, health-related information and health insurance details.

The breach was reported to the California Attorney General on Aug. 10, 2026.

USA DeBusk's response to the breach

The company is offering affected individuals two years of free identity monitoring services through Kroll. Affected individuals can activate their identity monitoring services by visiting Kroll's enrollment page and entering the membership number included in their notification letter.

Enrollment must be completed by the activation deadline listed in each person's letter.

For questions about the breach, affected individuals can contact USA DeBusk at 844-958-8959, toll-free, Monday through Friday from 8 a.m. to 5:30 p.m. Central Time, excluding major U.S. holidays.