Ericsson ericsson.com Ericsson data breach: what happened and what to do
Ericsson Inc. told people in March 2026 that a vendor storing employee and customer data was breached between April 17 and April 22, 2025. Names, Social Security numbers and financial account details may have been taken.
View all 13,115 breaches- Breach date
- 17 Apr 2025
- Made public
- 9 Mar 2026
- Data exposed
- Names, Social security numbers, Financial account information
- Last updated
What happened
Ericsson Inc., the US arm of the Swedish telecom equipment maker, began mailing breach notices on March 9, 2026. The breach did not happen on Ericsson's own network. A service provider that stores certain employee and customer data was hacked, and Ericsson's notice to state attorneys general says information may have been taken without authorization between April 17 and April 22, 2025. The vendor told Ericsson about it around November 10, 2025, and Ericsson hasn't named the provider.
What was exposed
The letter filed in Massachusetts lists first and last names, Social Security numbers, and financial account information with the access details for those accounts. Other state filings and news reports describe a broader list for some people, so check your own letter for the exact items. State filings show at least 4,377 people were notified, but the notices don't state a nationwide total.
A Social Security number plus a name is what an identity thief needs to open credit in your name or file a fraudulent tax return. Financial account details make bank-themed phishing calls and texts far more convincing, because the caller can quote real information.
What Ericsson did
Ericsson says neither it nor the vendor has evidence that the data was misused. It offered affected people free credit monitoring and identity theft recovery through IDX, with an enrollment deadline of June 9, 2026. If you got a letter and haven't enrolled, the deadline has passed, but a credit freeze is free and works the same way for blocking new accounts.
What to do if you were in it
- 1
Freeze your credit at all three bureaus
A freeze stops anyone opening new credit in your name. It's free at Equifax, Experian and TransUnion, and you can lift it when you need to apply for something.
- 2
Watch your bank and card statements
If your letter mentions financial account information, look for transactions you don't recognize and ask your bank about extra verification on those accounts.
- 3
Be wary of calls and texts that quote your details
Anyone who knows your name and account information can sound legitimate. Hang up and call the number on the back of your card.
- 4
Check your letter for the exact data
Each notice lists what was taken for that person. Keep the letter for your records.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see where your info has turned up. Serus monitors breach databases and the dark web and alerts you, though it can't remove data from a breach.
Frequently asked
Was I affected by the Ericsson data breach?
If you were, Ericsson mailed you a letter starting March 9, 2026. The breach hit a vendor that stored employee and customer data.
What information was exposed?
Names, Social Security numbers and financial account information, according to the Massachusetts notice. Some filings describe more.
Has the data been misused?
Ericsson says it has no evidence of misuse or attempted misuse of the information.
Should I freeze my credit?
If your Social Security number was in the letter, a freeze at Equifax, Experian and TransUnion is a sensible, free precaution.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
