The firm emphasized that the breach did not involve payroll data and only affected a single client. It immediately notified the client and is taking “appropriate measures to investigate and mitigate any issues.”
ADP discovered the breach during routine systems monitoring. It said the breach occurred in a platform that is no longer sold by ADP but continues in use as a legacy platform.
“ADP has also been actively cooperating with law enforcement to determine the cause of this incident and to assist authorities in identifying and apprehending those responsible”, the company said.
Workscape was an 11-year-old privately held company based in Marlborough, Mass., when ADP acquired it last August.
At the time of the acquisition, Workscape had 400 employees and served a broad client base, including numerous Fortune 250 companies. The company provided products solutions to more than 3.5 million users with services deployed in over 180 countries, 48 currencies and 70 languages.
Parent company ADP has nearly $9 billion in revenues and about 570,000 clients worldwide.