Sirva Relocation LLC faced a legal challenge after a data breach exposed the Social Security number (SSN) of an employee (Rosalyn Rivera) whose employer had contracted Sirva for relocation services. The breach led to a proposed class-action lawsuit, with the US District Court for the Central District of California allowing Rivera to proceed as a third-party beneficiary under the employer-Sirva contract. The core allegation was that Sirva failed to protect personal information as contractually obligated, resulting in the unauthorized exposure of sensitive employee data. While the article does not specify the scale of the breach (e.g., number of affected individuals) or direct financial harm, the leak of SSNs—a high-value target for identity theft—implies significant reputational and legal risks for Sirva, including potential regulatory scrutiny and financial liabilities from litigation. The case highlights vulnerabilities in third-party vendor data protection, particularly in sectors handling employee relocation where sensitive personal and financial details are routinely shared.

The Maine Office of the Attorney General reported a data breach involving Sirva, Inc. on February 4, 2025. The breach, which occurred between August 16, 2023, and October 17, 2023, involved unauthorized access to certain systems, affecting a total of 41 individuals and specifically one Maine resident. Identity theft protection services through Kroll for one year were offered to the affected individuals.