12/05/2023
The MeridianLink Security and IT teams, in collaboration with cybersecurity experts and law enforcement, have
completed the investigation of a recent cybersecurity incident. Based on the investigation, fewer than 75 consumers’ personally identifiable information (PII) was involved. We identified no evidence of unauthorized access
to our production platforms, and the incident has caused minimal business interruption.
We are contacting the limited number of customers whose consumers’ PII was involved. In addition, we will continue
to work with internal and external cybersecurity experts to further strengthen our defenses. We remain committed to
maintaining a mature information security program that protects our applications, networks, and systems.
11/20/2023
MeridianLink’s Security and IT teams, in collaboration with cybersecurity experts and law enforcement, have
diligently investigated a recent cybersecurity incident.
On November 10, MeridianLink identified a threat actor’s improper access to one non-privileged user’s account and
removed the threat actor’s access promptly. Our
forensic investigation confirms that the threat actor did not access MeridianLink’s networks, servers, databases,
integrations, or any part of our customer product platforms. Further, no ransomware or malware was deployed on
MeridianLink’s network.
As our forensic investigation concludes, we will continue to work with external experts to analyze the limited
amount of data involved in the incident.
11/15/2023
MeridianLink recently identified a cybersecurity incident. Safeguarding our customers’ and partners’ information is
something we take seriously. Upon discovery, we acted immediately to contain the threat and engaged a team of
third-party experts to investigate the incident. Based on our investigation to date, we have identified no evidence
of unauthorized access to our production platforms, and the incident has caused minimal business interruption. If we
determine that any consumer personal information was involved in this incident, we will provide
notifications, as required by law.
We have no further details to offer currently, as our investigation is ongoing.