Ingram Micro ingrammicro.com Ingram Micro data breach: what happened and what to do
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
Attackers accessed and copied files from Ingram Micro's internal systems on July 2 and 3, 2025. The company told 42,521 people, mostly employment and job applicant records, that names, birth dates and Social Security numbers were involved.
View all 13,118 breaches- Breach date
- 2 Jul 2025
- Affected
- 42,521
- Data exposed
- Names, Dates of birth, Social security numbers
- Last updated
What happened
Ingram Micro, the IT distributor, detected a ransomware incident on July 3, 2025. Attackers accessed and copied files from internal systems between July 2 and July 3. Operations were restored within about a week and fully resumed on July 9. The company disclosed the data theft in January 2026 in a filing with the Maine Attorney General, reported by BleepingComputer and Security Affairs.
The notice letters went to 42,521 people. The affected records are employment and job applicant records, and what was involved varies by person. Reports say it included names, birth dates, Social Security numbers and job-related details.
If you worked or applied at Ingram Micro, a Social Security number and birth date are enough for identity theft, and job details make a fake HR or recruiter message look real. The company offers two years of free credit monitoring and identity theft protection.
Ingram Micro hasn't confirmed who was responsible. Reports say the Safepay group claimed the attack.
The breach notice reached people months after the attack, so check any letter against the dates above. It arrived in January 2026, roughly six months after the files were copied.
Sources checked: bleepingcomputer.com, securityaffairs.com, oag.ca.gov
Last verified against the official page:
What to do if you were in it
- 1
Freeze your credit at all three bureaus
A freeze is free and stops anyone opening new credit in your name. Set it up at Equifax, Experian and TransUnion, and lift it only when you apply for credit yourself.
- 2
Use the free credit monitoring if you were offered it
Ingram Micro offers two years of free credit monitoring and identity theft protection. Sign up with the code in your letter before it expires, and read your statements for charges you don't recognize.
- 3
Be wary of HR and recruiter messages
Messages that mention your job or application can be scams. Verify through the company's official channels.
- 4
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which breaches include your email address or phone number. Serus keeps monitoring breach databases and the dark web and alerts you when something new turns up.
Official filings
- Texas Attorney General , filed 21 Jan 2026 : 42,521 people
- California Attorney General , filed 16 Jan 2026
Timeline
-
The breach happened
-
Reported to the California Attorney General
-
Reported to the Texas Attorney General
Frequently asked
Was I affected by the Ingram Micro data breach?
Ingram Micro notified 42,521 people, mainly current or former employees and job applicants. Look for a letter.
What was exposed?
Names, birth dates, Social Security numbers and job-related details, depending on the person.
Should I freeze my credit?
If your Social Security number was involved, yes. It's free and blocks new accounts opened in your name.
Sources
- Ingram Micro says ransomware attack affected 42,000 people · bleepingcomputer.com
- Ransomware attack on Ingram Micro impacts 42,000 individuals · securityaffairs.com
- Search Data Security Breaches | State of California - Department of Justice · oag.ca.gov
Something wrong or out of date? Tell us and we'll re-check it.
