Acuity Brands Hit in Cyber Attack

December 13, 2022


Lighting and building management company, Acuity Brands, said it ended up hit by two data breaches over the past two years, and it appears it is just now getting around to informing the public and workers.
Atlanta, Georgia-based Acuity Brands said it identified a data security incident one year ago and it immediately took steps to secure its systems, and hired a third-party cybersecurity firm to conduct a thorough investigation.
“The investigation determined that an unauthorized person obtained access to some of Acuity’s systems on December 7 and December 8, 2021, and copied a subset of files out of its network during that time,” Acuity said in an advisory.
The files involved in the December 2021 incident may have included the name, Social Security number, and enrollment and claims information related to current and former employees’ participation in Acuity’s health plan. In addition, the information in the files may have included the name, driver’s license number, financial account information, and limited health information related to other aspects of an individual’s employment with Acuity, such as injury information related to workers compensation claims or related to requests for leave under the Family and Medical Leave Act. The types of information in the files were not the same for all individuals

Incident Date

December 7, 2021

Estimated Cost

Unknown at this time

Type of Malware

No Malware identified

Threat Source

No threat source identified