Drivestream Inc. was helping a client company move employee data over to a new Human Capital Management (HCM) system when, on or around December 9, 2024, it noticed suspicious activity inside its data center. An investigation determined that an unauthorized actor got into certain systems and downloaded files between December 4 and December 9, 2024 — a hacking or system intrusion into the infrastructure Drivestream used to handle that client’s employee data. Drivestream says it found no evidence of identity theft or fraud tied to the incident, but it reviewed the affected files anyway to see whose information was involved.
