The breach originated through a security flaw in Metabase, a software tool utilized by the Boulder-based payroll firm. Poppins Payroll identified the unauthorized access on the same day it occurred, subsequently notifying state Attorneys General in California and Vermont. While Vermont officials confirmed 333 affected residents, the total number of victims across the country remains undisclosed by the company.

Edelson Lechtzin LLP is now evaluating potential claims for those impacted by the leak. The firm aims to determine if legal action can secure compensation for out-of-pocket expenses, lost time, and broader privacy damages, while potentially compelling the company to overhaul its data security protocols. Affected individuals are urged to monitor their financial statements and utilize the two-year credit monitoring services offered by Poppins Payroll to mitigate the risk of identity theft.