COMMITMENTS AND CONTINGENCIES |
9 Months Ended |
|---|---|
Sep. 30, 2025 | |
| Commitments and Contingencies Disclosure [Abstract] | |
| COMMITMENTS AND CONTINGENCIES | COMMITMENTS AND CONTINGENCIES Letters of Credit and Guarantees - We provide letters of credit to landlords (lessors) of our leased premises in lieu of cash security deposits, which totaled $3.2 million and $3.2 million at September 30, 2025 and December 31, 2024, respectively. In addition, we provide license bonds to various state agencies to meet certain licensing requirements. The amount of license bonds outstanding was $2.2 million and $2.2 million at September 30, 2025 and December 31, 2024, respectively. Legal Proceedings - On November 10, 2023, CBIZ was named as a defendant in a putative class action lawsuit in the United States District Court for the District of Massachusetts by an individual claiming to be an employee of a CBIZ client whose personally identifiable information (“PII”) was compromised and stolen during a cyberattack CBIZ experienced on or about May 31, 2023. As a result of this incident, hackers were able to access and download certain files from CBIZ’s MOVEit Transfer server. The lawsuit alleges that CBIZ and Progress Software Corporation, the owner of MOVEit Transfer, failed to adequately secure and safeguard the individual’s, and similarly situated employees of CBIZ’s clients, PII from unauthorized access. The lawsuit seeks various remedies, including actual, compensatory, and punitive damages, along with injunctive relief, costs, and attorneys’ fees. On December 8, 2023, CBIZ was named as a defendant in a second putative class action lawsuit in the United States District Court for the District of Massachusetts by an individual making similar claims and seeking similar remedies as in the first lawsuit regarding the cyberattack CBIZ experienced on or about May 31, 2023. Both cases were transferred into a multidistrict litigation, styled as In Re: MOVEit Customer Data Security Breach Litigation, pending in the United States District Court for the District of Massachusetts (the “MDL”). To date, the MDL has over 180 cases against over 100 different defendants, all with claims arising out of the cyberbreach by hackers of Progress Software Corporation’s MOVEit Transfer software. The cases in the MDL, including the cases against CBIZ, are in their earliest stages, with a stay in place until the MDL Court issues a scheduling order. Due to the early stage of litigation, the Company is not able to determine or predict the ultimate outcome of these lawsuits nor reasonably provide an estimate or range of the possible outcome or losses, if any. In June of 2025, the Company settled litigation against a small group of former employees. As part of the settlement of that litigation, the Company received a settlement payment of $12.5 million, which was recorded as a pre-tax gain in “Other income, net” on the Condensed Consolidated Statements of Comprehensive Income for the nine months ended September 30, 2025. In addition to the items disclosed above, the Company is, from time to time, subject to claims and lawsuits arising in the ordinary course of business. We cannot predict the outcome of all such matters or estimate the possible loss, if any. Although the proceedings are subject to uncertainties in the litigation process and the ultimate disposition of these proceedings is not presently determinable, we intend to vigorously defend these matters. Refer to Note 12, Commitments and Contingencies, to the consolidated financial statements contained in our Annual Report on Form 10-K for the year ended December 31, 2024 for further discussion on the Company's commitments and contingencies.
|