Illegally stored my SS# then got hacked and covered it up
[EDIT: I’m updating my review to add that I just learned that during the 2.5 MONTHS that DISA had hacker running rampant in its systems in 2024, it was also busy closing two major financial deals—The 1st deal was money DISA received as a major investment from Neuberger Berman, a global capital group. The 2nd deal was DISA’s acquisition of CastleBranch, using the money from Neuberger Berman. Additionally, DISA acquired American DataBank 10 months later…and just two weeks after closing this deal, they FINALLY informed the 3-million victims, including me, of their negligence! Is anyone supposed to believe DISA would have been able to complete those deals if they had followed the law and notified victims as required?]
ORIGINAL REVIEW: I strongly caution corporations against working with this poor-security company. It’s one of those times that no stars is warranted.
This company apparently ran an employment screen on me. That’s what a letter they sent me says. I have never heard of them and I never consented to my private data being given to them, which means they broke the laws of my state. According to the letter they sent me, my name and social security number were hacked from their system last year (approximately March 2024). They kept that information secret and waited almost an entire year to tell victims of the breach. Three million people got their data hacked! Just google “disa data breach”. There are already multiple lawsuits against them.
Additionally, I haven’t undergone an employee screen in years. That means they were holding onto my social security number for years, which is also illegal in my state, beyond that they had no permission to know it to begin with. The letter they sent me has a number for “dedicated support”. I called the number and an actually very nice person on the other end read me a statement that was exactly the same as what the letter said, but with the extra line that it’s an ongoing investigation and so they cannot share more info. The nice rep sounded embarrassed. I get it; they have a CSR job and they aren’t the cybersecurity crew. Anyway DISA held my SS# illegally, then stored it illegally, then lost it to hackers, then waited a year to tell me about it, then failed to provide any legit form of support at its dedicated support line. And I guess they did that to three million other people too. AVOID!