100,000 Impacted by Cornwell Quality Tools Data Breach

American mobile tools manufacturer Cornwell Quality Tools says a data breach discovered late last year affected more than 100,000 people. According to notification letters, the company found unusual activity on 20 December 2024, and an investigation showed hackers had gained access to its systems about a week earlier.

The breach may have exposed names, Social Security numbers, medical information, and financial account numbers of impacted individuals; the Maine Attorney General’s Office has been informed that the incident impacts 103,782 people.

The Cactus ransomware group claimed responsibility for an attack on Cornwell Quality Tools in early February, and published corporate documents and driver’s license copies on its Tor-based leak site to illustrate its claims; the group stopped being active in mid-March 2025 and it’s unclear if those stolen data were leaked. This context follows prior ransomware activity, including a late-2022 Hive attack on the company.