Employer Solutions Staffing Group Data Breach Affects 20K+

Employer Solutions Staffing Group, a Professional Employer Organization that provides outsourced payroll, employee benefits and HR services to businesses, has disclosed a data breach involving sensitive personal and health information.

On Jan. 13, 2026, ESSG became aware of suspicious activity on its network. It was later determined that certain files stored on ESSG's systems were accessed or acquired without authorization on that same date.

A ransomware group known as Akira claimed responsibility for the attack. On Feb. 24, 2026, the group posted on the Tor network that it had obtained 80 gigabytes of data from the organization.

The stolen data allegedly included passports, driver's licenses, Social Security numbers and other personal information. The group also claimed to have obtained financial records, HR files, client and partner information, non-disclosure agreements and other confidential documents.

ESSG undertook a comprehensive review of the affected files to determine what information was involved and which individuals were affected. This review was completed on Oct. 13, 2026, in which ESSG confirmed that personal information belonging to certain individuals was present in the compromised files.

The types of personally identifiable information exposed in the breach included names, Social Security numbers, driver's license numbers, government ID numbers, financial account numbers and credit or debit card information.

The breach also compromised protected health information, including medical records and health insurance information.

So far, the incident has impacted 19,551 Texas residents, 141 Rhode Island residents and 43 Vermont residents were affected. The breach was reported to attorneys general in California on Nov. 12, 2026.

Consumer notification letters are being sent by U.S. Mail to affected individuals beginning on Nov. 12, 2026.

Employer Solutions Staffing Group's response to the breach

ESSG is providing affected individuals with access to credit monitoring and identity protection services through IDX. Depending on individual circumstances, the company is offering either 12 or 24 months of coverage.

Individuals who received a notification letter can enroll in the monitoring services by visiting the IDX response page or by calling 1-877-201-3335.

Representatives are available Monday through Friday from 9 a.m. to 9 p.m. Eastern Time, excluding major U.S. holidays. The deadline to enroll is Feb. 12, 2027.

For additional questions, individuals may write to ESSG at 7201 Metro Blvd. Suite 900, Minneapolis, MN 55439, or call the company at 952-835-1288.