Ceridian provides human resources software services to business. 

​

The FTC complaint alleged that they engaged in unfair and deceptive acts or practices because, despite their claim that they had implemented reasonable and appropriate measures to protect consumer information from unauthorized access, they failed to do so, such as by failing to encrypt consumer information, failing to assess the vulnerability to or implement defenses to SQL injection attacks, and failing to implement measures to detect and prevent unauthorized access to consumer information, leading to hackers using an SQL injection attack against Ceridian's website and website application and accessing and exploiting the information of 27,673 consumers including their bank account numbers, social security numbers, and birth dates.