42,000 Impacted by Ingram Micro Ransomware Attack - SecurityWeek

IT giant Ingram Micro is notifying roughly 42,000 people that their personal information was compromised in a ransomware attack. The incident occurred on July 3, 2025, and forced the IT products and services distributor to take certain systems offline to contain the attack, which resulted in widespread outages across its services. Ingram Micro was able to restore the affected systems roughly a week later, resuming operations across all countries and regions by July 9. During the attack, hackers accessed certain company systems containing employment and job applicant records, the company now says in notification letters sent to potentially affected individuals. “Based on our investigation, we determined that an unauthorized third party took certain files from some of our internal file repositories between July 2 and 3, 2025,” Ingram Micro says. The compromised information includes names, dates of birth, Social Security numbers, passport numbers, driver’s license numbers, other government-issued identification numbers, and employment-related data. Ingram Micro notified the Maine Attorney General’s Office that 42,521 people were impacted by the incident. The company is providing the potentially affected individuals with 24 months of free credit monitoring and identity protection services. While Ingram Micro did not name the ransomware gang responsible for the attack, the Safepay group listed the company on its Tor-based leak site in July, claiming the theft of 3.5 terabytes of data. Safepay made the allegedly stolen data publicly available in early August, which suggests that Ingram Micro did not pay a ransom. Related: 750,000 Impacted by Data Breach at Canadian Investment Watchdog Related: Central Maine Healthcare Data Breach Impacts 145,000 Individuals Related: Traveler Information Stolen in Eurail Data Breach Related: Robo-Advisor Betterment Discloses Data Breach WRITTEN BY Ionut Arghire Ionut Arghire is an international correspondent for SecurityWeek. More from Ionut Arghire Bold Security Emerges From Stealth With $40 Million in Funding Google Paid Out $17 Million in Bug Bounty Rewards in 2025 Onyx Security Launches With $40 Million in Funding Chrome 146 Update Patches Two Exploited Zero-Days Ally WordPress Plugin Flaw Exposes Over 200,000 Websites to Attacks Splunk, Zoom Patch Severe Vulnerabilities Cisco Patches High-Severity IOS XR Vulnerabilities Critical N8n Vulnerabilities Allowed Server Takeover Latest News Oracle EBS Hack: Only 4 Corporate Giants Still Silent on Potential Impact Security Firm Executive Targeted in Sophisticated Phishing Attack China-Linked Hackers Hit Asian Militaries in Patient Espionage Operation Threat Actor Targeting VPN Users in New Credential Theft Campaign ForceMemo: Python Repositories Compromised in GlassWorm Aftermath Hacking Attempt Reported at Poland’s Nuclear Research Center Loblaw Data Breach Impacts Customer Information Critical HPE AOS-CX Vulnerability Allows Admin Password Resets Trending Webinar: Securing Fragile OT In An Exposed World March 10, 2026 Get a candid look at the current OT threat landscape as we move past "doom and gloom" to discuss the mechanics of modern OT exposure. Register Virtual Event: Supply Chain Security And Third-Party Risk Summit March 18, 2026 Join the event where top security experts unpack the biggest software supply chain risks. Register People on the Move The US Senate has confirmed Army Lt. Gen. Joshua Rudd to lead NSA and CYBERCOM. Business software company Rippling has appointed Adrian Ludwig as CSO. Orca Security has named Rachel Nislick as Chief Marketing Officer. More People On The Move Expert Insights The Human IOC: Why Security Professionals Struggle With Social Vetting Applying SOC-level rigor to the rumors, politics, and 'human intel' can make or break a security team. (Joshua Goldfarb) How To 10x Your Vulnerability Management Program In The Agentic Era The evolution of vulnerability management in the agentic era is characterized by continuous telemetry, contextual prioritization and the ultimate goal of agentic remediation. (Nadir Izrael) SIM Swaps Expose A Critical Flaw In Identity Security SIM swap attacks exploit misplaced trust in phone numbers and human processes to bypass authentication controls and seize high-value accounts. (Torsten George) Four Risks Boards Cannot Treat As Background Noise The goal isn’t about preventing every attack but about keeping the business running when attacks succeed. (Steve Durbin) How To Eliminate The Technical Debt Of Insecure AI-Assisted Software Development Developers must view AI as a collaborator to be closely monitored, rather than an autonomous entity to be unleashed. Without such a mindset, crippling tech debt is inevitable. (Matias Madou) Flipboard Reddit Whatsapp Email