On Jan. 20, 2025, Manpower of Lansing, MI Inc. experienced a significant IT outage related to its global affiliate, Manpower Inc. that disrupted access to systems. After the incident was contained, the company launched an investigation with external cybersecurity experts.
The ransomware group, RansomHub, claimed credit for the attack. On January 22, 2025, RansomHub posted on the dark web stating they had obtained 500 GB of the organization’s data, threatening to publish it within eight to nine days. This public claim on the Tor network underscores the severity and criminal intent behind the breach.
The companies' investigations revealed that a hacker had gained unauthorized access to the company’s network between December 29, 2024, and January 12, 2025.
On July 28, 2025, Manpower Inc. determined that the personal information of individuals may have been involved in the breach. The exposed data included names, Social Security numbers, driver’s license numbers, government-issued ID numbers (such as passport and state ID cards), and medical information.
The scale of the breach is substantial. Manpower of Lansing reported to regulators that a total of 144,189 people in the United States were affected. In Texas, 588 individuals were impacted, while in Maine, 11 people were affected, and in Massachusetts, 35 individuals had their information exposed.
The breach was disclosed to the Maine Attorney General’s office on August 11, 2025, and to the Texas Attorney General’s office Vermont Attorney General on August 12, 2025.
To support affected individuals, Manpower of Lansing is offering complimentary Equifax Credit Watch Gold protection services. This includes either 12 or 24 months of credit monitoring, daily access to Equifax credit reports, WebScan notifications, fraud alerts, fully managed identity theft recovery services, and a $1 million insurance reimbursement policy. Affected individuals can enroll in these services using a personalized activation code and are encouraged to do so before the enrollment deadline provided in their notification letter.
For more information or assistance, affected individuals can call the dedicated support line at 855-374-7054, available Monday through Friday, 9 a.m. to 9 p.m. Eastern Time, excluding major U.S. holidays. The full notice to consumers, including additional steps for protecting personal information, is available in PDF format at the bottom of this page.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.