Ransomware attack on Ingram Micro impacts 42,000 individuals

Ingram Micro disclosed that a ransomware incident exposed the personal data of about 42,000 people, including names, dates of birth, Social Security numbers and job-related information. The firm said the cyber event was detected on 3 July 2025 and that an unauthorized third party took certain files from internal repositories between 2 and 3 July 2025, with some of those files containing personal data. The company restored affected systems within about a week and had fully resumed global operations by 9 July.

The data breach notification to Maine’s Attorney General noted that the types of affected information varied by individual. Ingram Micro did not name the threat actor, but the Safepay ransomware group claimed the attack, added the company to its Tor leak site, and asserted it stole 3.5 TB of data, publishing it after negotiations appeared to fail; at the time of reporting, the download link was not working. The company is offering two years of free credit monitoring and identity protection to affected individuals. according to Safepay