The Job Shop, a San Francisco-based staffing agency that operates under Forest & Einstein Staffing, Inc., says an unknown threat actor broke into one of its data servers around mid-June 2025. The company only learned about the intrusion on August 14, 2025, when its outside IT services provider flagged the activity. According to the notice, the attacker may have pulled, or exfiltrated, files from that server, though The Job Shop says it cannot pin down exactly which records were taken or confirm whether the entire server’s contents were copied.
The server in question held records tied to temporary workers who had been placed through The Job Shop. The notice was sent to people the company believes may have had their data on that system, but the filing does not give a specific count of how many individuals received letters.
What personal details were sitting on the breached server?
- Full name
- Email address
- Mailing address
- Social Security number
The Job Shop has arranged for affected individuals to receive Equifax Credit Watch Gold at no charge for twenty-four months, which includes credit report monitoring, web scans for your personal data on trading sites, fraud alerts, identity restoration support, and identity theft insurance. To sign up, go to www.equifax.com/activate and enter the activation code included in your personal copy of the letter; the deadline to enroll is also specified there.
Given that a Social Security number may be involved, what should you actually do first?
- Enroll in the free Equifax Credit Watch Gold offer described above before its deadline — it’s already paid for on your behalf.
- Pull your free credit reports at annualcreditreport.com and check them line by line for accounts or inquiries you don’t recognize.
- Place a fraud alert with one of the three credit bureaus (Equifax, Experian, or TransUnion) — it’s free and the bureau you contact must notify the other two.
- Consider a credit freeze if you want to block new-account fraud entirely; it’s stronger than a fraud alert but requires you to lift it temporarily when applying for new credit.
- Watch your bank and existing credit accounts for small, unfamiliar charges, which are often how identity thieves test whether an account is active.
- Because a full Social Security number may be exposed, consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere, such as on the dark web.
- Be wary of unexpected calls, texts, or emails asking you to verify account details — scammers sometimes use breach news as a pretext to phish victims further.
- If you spot suspicious activity, report it to your local police, the FTC at IdentityTheft.gov, or by calling 1-877-438-4338.
Questions about this incident can be directed to The Job Shop at 460 Brannan Street, #77008, San Francisco, CA 94107, or by emailing [email protected].