On the morning of March 13, 2024, a significant security incident was identified by Amerlux LLC’s independent IT vendor. This event was quickly determined to be a ransomware attack, initiated by a well-known cybercriminal group. The attack began approximately on March 7, 2024, and continued until the IT vendor successfully isolated Amerlux’s network on March 13, disconnecting all devices to halt the attack.
During the breach, various types of sensitive personal information were potentially accessed. The compromised data includes:
Immediately upon discovery, Amerlux LLC took decisive action to mitigate the effects of the breach. The company's IT vendor, alongside Ra Security, a cybersecurity firm, conducted a thorough investigation and recovery process. Amerlux also updated its antivirus software across all systems and reinforced the security of its network and third-party hosted systems, such as Oracle and Workday, which were confirmed secure.
To further protect affected individuals, Amerlux LLC is offering 24 months of identity theft protection services through IDX, a ZeroFox Company. This service includes credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed ID theft recovery services. Affected individuals are encouraged to enroll by July 22, 2024. For enrollment, please visit IDX Identity Protection Services.
If you suspect that your information was compromised in this breach, it is crucial to act promptly to secure your identity. Here are steps you can take:
Amerlux LLC is a subsidiary of Delta Electronics, Inc., specializing in innovative, energy-efficient lighting solutions for both commercial and residential spaces.
For further details regarding the breach and how to protect yourself, you can access the official notice to consumers provided by Amerlux LLC on the Massachusetts Attorney General's website.