The Job Shop Data Breach Exposes 135GB of Sensitive Info

The Job Shop, a nationwide staffing and employment agency, experienced a major data breach. On Aug. 14, 2025, the company was notified by its third-party IT services vendor that a cyberattack had occurred. An investigation revealed that a cybercriminal accessed a server belonging to The Job Shop and may have obtained files with personally identifiable information (PII).

A ransomware group known as PEAR claimed responsibility for the breach. PEAR stated they had leaked 135 GB of data, including financial records, PII and PHI, partner and vendor data, client information and full email correspondence. The hack was posted on a dark web Tor network site, indicating a ransomware attack with a public data leak.

A review confirmed that the hacked server contained completed Forms W-2 for 2018, 2019 and 2020. The Job Shop and their IT vendor was unable to determine if some or all W-2 forms stored on the server were compromised during the cybersecurity incident.

Exposed information included names, addresses and Social Security numbers. The total number of impacted individuals has not been released, but is believed to be in the thousands.

The Job Shop has begun notifying affected individuals by mail. The data breach was also disclosed to the Massachusetts Attorney General's office and the California Attorney General on Sept. 29, 2025.

The Job Shop's response

In addition to required state and federal disclosures, The Job Shop is offering impacted individuals 24 months of free credit monitoring and identity theft protection services through Equifax Credit Watch Gold. This includes credit monitoring with email notifications, daily access to Equifax credit reports, WebScan notifications for personal information found on fraudulent sites, automatic fraud alerts, identity restoration services and up to $1 million in identity theft insurance coverage.

If you receive a notice from The Job Shop about this breach, you may want to:

• Sign up for the free credit monitoring and identity theft protection services, offered by the company.
• Monitor your credit reports and financial accounts for any unusual activity.
• Be alert for phishing emails or phone calls that may use your exposed information.
• Consider placing a fraud alert or credit freeze with major credit bureaus.

More information about the company is available on The Job Shop’s website.