The California Office of the Attorney General disclosed on May 17, 2023, that Carvin Software, LLC suffered a data breach affecting On Demand Staffing, Inc.—a third-party entity linked to the company. While the exact date of the incident and the number of impacted individuals remain undisclosed, the breach exposed sensitive information, including names and unspecified additional data elements. The nature of the compromised data suggests potential risks to personal identifiers, though the full scope of the exposure—such as whether financial, employment, or other critical details were involved—has not been confirmed.The breach highlights vulnerabilities in data protection measures, particularly concerning third-party associations. Given the lack of clarity on the extent of the leak, the incident could lead to reputational harm, regulatory scrutiny, or downstream risks for affected individuals, such as identity theft or phishing attempts. The involvement of a staffing company further raises concerns about the exposure of employee-related data, though no explicit confirmation of internal employee records being compromised has been provided.Authorities have not yet detailed whether the breach stemmed from a targeted cyber attack, an unpatched vulnerability, or another vector, leaving the root cause and mitigation steps unclear. The incident underscores the broader challenges organizations face in securing third-party data ecosystems and the cascading impacts of such breaches on trust and operational integrity.

The Maine Office of the Attorney General reported that Carvin Software, LLC experienced a data breach discovered on March 29, 2023, involving unauthorized access to files from February 22, 2023, to March 9, 2023. The breach potentially affected 187,360 individuals, including 3,948 Maine residents, and involved compromised information such as names, Social Security numbers, and financial account information. Written notices were sent to affected individuals on May 2, 2023.