Chemonics News
Notice of Security Incident
December 3, 2024 | 2 Minute ReadChemonics International, Inc. (“Chemonics,” “we,” “us,” or “our”) is providing notice of an incident that involved personal information. While we are unaware of any attempted or actual misuse of personal information, we are providing notice of the event, our response, and those affected can take to protect their personal information.
WHAT HAPPENED? On December 15, 2023, Chemonics became aware of suspicious activity related to certain user accounts (the “Incident”). Upon discovery, we enacted our response protocols, including conducting password resets and disabling impacted accounts. With the assistance of cybersecurity experts, we launched an investigation to determine the nature and scope of the incident. We also contacted appropriate law enforcement authorities.
The in-depth cyber forensic investigation identified evidence indicating the unauthorized access occurred beginning on May 30, 2023, and continued through the last date of detection on January 9, 2024. Through the investigation, it was also determined that data was subject to unauthorized access and acquisition. With the assistance of third-party eDiscovery experts retained through outside counsel, Chemonics conducted a thorough and time-intensive review of the data at issue to identify the personal information subject to unauthorized access and acquisition and determine to whom the personal information relates. This process took time to complete, and on October 31, 2024, the eDiscovery process confirmed which individuals’ personal information was subject to unauthorized access.
WHAT WE ARE DOING. Please know that protecting personal information is something that Chemonics takes very seriously. We conducted a diligent investigation to confirm the nature and scope of the Incident, and we have taken steps to bolster overall security including strengthening multi-factor authentication processes, enhancing email security, deploying additional endpoint monitoring and detection tools, and blocking suspicious Internet traffic. We are providing notice and offering credit monitoring services to individuals based on the personal information that was potentially impacted.
WHAT YOU CAN DO. We encourage you to remain vigilant by reviewing account statements and monitoring free credit reports. You may want to temporarily freeze your credit. You should be on guard for schemes where malicious actors may pretend to represent Chemonics or reference this incident. If you have questions, please contact us at the number described below.
FOR MORE INFORMATION. We sincerely regret any inconvenience or concern caused by this incident. If you have further questions or concerns, or would like an alternative to enrolling online, please call 1-888-658-8864 toll-free, Monday through Friday, 9 a.m. to 9 p.m. Eastern Time (excluding major U.S. holidays).