Cannabis business applicants and licensees in Massachusetts were informed of a data breach that occurred at the Cannabis Control Commission’s partner for employee background checks, Creative Services, Inc.
Creative Services, a background screening and security consulting firm identified suspicious computer activity on November 26, 2021. This turned out to be a malicious actor who gained access to their internal servers. According to the notice, information including the name, date of birth, Social Security number, and/or driver’s license number of Commission applicants and licensees may have been accessed.
For those who may be affected, Creative Services is sending notice by mail which will include steps that individuals can take to enroll in credit monitoring services, which Creative Services will bear the cost of. The notice says that Creative Services has reported the incident to federal law enforcement and will also notify state regulators of the incident.
Read the full notice below:
