A data breach at IMA Diligence Services resulted from unauthorized access to a legacy server managed by a third party, leading to the theft of personal and financial information of approximately 525,000 individuals. The attackers accessed the server over an eight-day period in December 2025 and exfiltrated sensitive data including Social Security numbers, driver’s license numbers, financial account details, medical and insurance information, and other personal identifiers. The Genesis ransomware group claimed responsibility and published some of the stolen data. The breach was discovered when the server became inaccessible, prompting notification to law enforcement and an investigation by external cybersecurity experts. The incident is not related to a software vulnerability with an available patch but rather to compromised third-party infrastructure.

The breach exposed sensitive personal and financial information of over half a million individuals, increasing the risk of identity theft, financial fraud, and privacy violations. The disclosure of Social Security numbers, driver’s license numbers, financial account information, and medical data represents a significant privacy and security risk for affected individuals. The involvement of a ransomware group claiming responsibility and publishing data publicly may further increase reputational damage and potential misuse of the stolen information.

No specific patch or remediation is available since the breach involved unauthorized access to a legacy third-party managed server. IMA Diligence Services has notified law enforcement, engaged external cybersecurity experts, and is providing 12 months of free credit monitoring and identity restoration services to affected individuals. Organizations should review third-party risk management practices and ensure legacy systems are properly secured or decommissioned. Affected individuals should monitor their financial accounts and credit reports for suspicious activity.