On or about July 5, 2022, Gresco Utility Supply experienced a ransomware incident. During a typical ransomware incident, cybercriminals “lock” an organization’s digital files to get paid for a digital key to unlock the files. We promptly launched an investigation, engaged a national cybersecurity firm to assist in assessing the scope of the incident and took steps to mitigate the potential impact to our community. Unfortunately, these types of incidents are becoming increasingly common and even organizations with some of the most sophisticated IT infrastructure available are affected.
A third-party forensic investigation determined that the personal information of certain current and former employees, customers and vendors was potentially compromised as a result of the incident. The potentially compromised files may have contained personal information including, but potentially not limited to: names, mailing addresses, dates of birth, Social Security numbers, driver’s license numbers, financial account information, medical information, health insurance information and usernames and passwords. As of this writing, Gresco Utility Supply has not received any reports from individuals of related misuse, identity theft or fraud since the date of the incident.
Gresco Utility Supply mailed notification letters to affected individuals who Gresco Utility Supply maintained information for on November 17,2022. The letters included additional information about what occurred, outlined the specific personal information that could have been exposed for that individual, and provided a toll-free number that individuals can call to learn more about the incident. The call center can be reached at 1-800-939-4170 and is available Monday through Friday from 9:00 am to 9:00 pm Eastern time. Gresco Utility Supply encourages you to remain vigilant, monitor your accounts, and immediately report any suspicious activity or suspected misuse of your personal information.
Gresco Utility Supply is committed to ensuring the security
of all information within its control, and is taking steps to prevent a similar
event from occurring in the future. This includes the strengthening of our
cybersecurity posture by performing additional hardening of our network,
platforms, and software to prevent the future occurrence of any similar data
security incidents. Gresco Utility Supply sincerely regrets any inconvenience
or concern that this matter may cause, and remains dedicated to ensuring the
privacy and security of all information in our control.