42,000 Impacted by Ingram Micro Ransomware Attack

IT distributor Ingram Micro says around 42,000 people were affected when ransomware hit its systems, with the incident occurring on 3 July 2025 and forcing some services offline. The company later recovered the impacted systems by 9 July 2025, after outages across its operations. In its notification letters, Ingram Micro disclosed that hackers accessed files containing employment and job applicant records, including names, dates of birth, Social Security numbers, passport numbers and government-issued IDs.

The Maine Attorney General’s Office has been notified that 42,521 people were impacted. While Ingram Micro did not name the gang behind the attack, the Safepay group listed the company on its Tor-based leak site in July, claiming the theft of 3.5 terabytes of data; the firm has offered 24 months of free credit monitoring and identity protection to potentially affected individuals, according to the official notice.