“Upon discovery, we immediately contained the incident and initiated an investigation with the assistance of third-party forensic experts. Our investigation determined that an unauthorized third party accessed our environment between February 9, 2024, and April 22, 2024, and procured some information.”
The company adds that the investigation could not “definitively conclude the specific data procured” but DISA has since launched its own review.