Ingram Micro Data Breach Lawsuit Investigation
Did you receive a breach notice from Ingram Micro? The global tech distributor confirmed a ransomware attack that siphoned off a staggering 3.5 TB of data, putting countless employees and customers at risk. Read on to see what was stolen, how to protect yourself, and whether you qualify to join the developing lawsuit.
Download SEC 8-K (PDF)What Happened?
On July 5, 2025, Ingram Micro disclosed to the U.S. Securities and Exchange Commission that it had suffered a ransomware attack carried out by the group SAFEPAY. The threat actors claimed they:
- Maintained prolonged access to Ingram Micro’s internal network
- Exfiltrated approximately 3.5 terabytes of sensitive data
- Encrypted files and locked key servers, disrupting global operations for several days
Ingram Micro has since restored core systems, notified law enforcement, and launched an internal investigation.
What Information Was Exposed?
Current disclosures indicate both employee and customer records were affected. Potentially compromised data includes:
- Names and addresses
- Dates of birth & Social Security numbers
- Government-issued ID details
- Medical and financial information
- Personnel files, customer account numbers, purchase history
- Bank details, transaction data, and other internal documentation
Who Is at Risk?
If you worked for, purchased from, or partnered with Ingram Micro, your personally identifiable information (PII) could be circulating on dark-web markets. With both financial and medical data in play, victims face elevated risks of:
- Identity theft and fraudulent credit applications
- Unlawful bank transfers or card charges
- Targeted phishing emails or phone scams
- Medical identity fraud and insurance misuse
Immediate Steps to Protect Yourself
- Enroll in free credit monitoring offered by Ingram Micro once available.
- Review credit reports from Equifax, Experian, and TransUnion and place a fraud alert or credit freeze if warranted.
- Monitor financial statements and set up transaction alerts on banking and credit accounts.
- Stay vigilant against phishing—verify any message that references the breach before clicking links or sharing data.
- Document any losses (charges, time spent, credit-freeze fees) to support a future compensation claim.
Can You File a Lawsuit?
U.S. data-privacy laws permit victims to seek compensation when negligent security practices lead to a breach. Potential damages may cover:
- Out-of-pocket expenses (e.g., credit-monitoring, freezing fees)
- Time spent resolving fraud or securing accounts
- Emotional distress and loss of privacy
Class-action attorneys are actively gathering evidence. Preserving your legal rights typically requires prompt action after receiving a breach notice.
How to Join the Ingram Micro Data Breach Investigation
If Ingram Micro notified you—or you suspect your data was involved—consult a qualified data-breach attorney to discuss your options. Filing a claim is generally free, and you will not pay fees unless compensation is recovered.
Frequently Asked Questions
- When did the Ingram Micro data breach occur?
- The ransomware attack was disclosed on July 5, 2025, though hackers may have had earlier access.
- What data did cybercriminals steal from Ingram Micro?
- Names, Social Security numbers, birth dates, addresses, bank details, customer files, and other internal documents—totaling roughly 3.5 TB of data.
- Has Ingram Micro offered free credit monitoring?
- The company stated it will provide credit-monitoring services once the forensic investigation is complete and impacted individuals are confirmed.
- Am I eligible to join the Ingram Micro data breach lawsuit?
- If your personal information was compromised, you might qualify for financial compensation. Eligibility is typically confirmed after submitting proof of notice or other documentation.
- What is the deadline to file a claim?
- Deadlines vary by state and claim type. Consult a data-privacy attorney as soon as possible to avoid missing important filing windows.
Stay informed—this page will be updated as new details emerge.