Skip to content
Brand AI

UKG

Controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile2 entries

  1. 2022

    Ransomware attack exposes Puma employee information stored with Kronos

    Issue disclosure

    Reports and breach notifications said a ransomware attack on Kronos’s systems resulted in personal information belonging to 6,632 Puma employees being stolen. Puma said no customer data was affected. UKG/Kronos said it brought in cybersecurity experts, notified authorities, and communicated with impacted users.

    Company response

    • Remediation — UKG/ Kronos

      Since the data theft came to light, UKG/ Kronos has brought in cybersecurity experts to mitigate the effect of the ransomware theft.

    • Ongoing disclosure — UKG/ Kronos

      It has also notified the authorities and communicated with impacted users.

    Source excerpt

    • As per the shared details, the ransomware attack led to data theft of a whopping 6,632 Puma employees.
    • Since the data theft came to light, UKG/ Kronos has brought in cybersecurity experts to mitigate the effect of the ransomware theft.
    • In response to a report of the data theft by Bleeping Computers, Puma's Senior Head of Communications Kerstin Neuber confirmed that no Puma customer data was impacted by the ransomware attack.
    Source

  2. 2021

    Kronos Private Cloud ransomware attack

    UKG disclosed in December 2021 that a ransomware attack, first detected on December 11, had affected the Kronos Private Cloud service. The platform was used by many major employers and public entities for workforce-management functions, creating disruption risks for timekeeping, payroll preparation, and scheduling. Some reports suggested a possible connection with the Log4Shell vulnerability, but UKG said it had no evidence that Log4Shell caused the ransomware incident.

    Source