Ingram Micro ingrammicro.com Ingram Micro data breach: what happened and what to do
Attackers accessed and copied files from Ingram Micro's internal systems on July 2 and 3, 2025. The company told 42,521 people, mostly employment and job applicant records, that names, birth dates and Social Security numbers were involved.
View all 13,115 breaches- Breach date
- 2 Jul 2025
- Affected
- 42,521
- Data exposed
- Names, Dates of birth, Social security numbers
- Last updated
What happened
Ingram Micro, the IT distributor, detected a ransomware incident on July 3, 2025. Attackers accessed and copied files from internal systems between July 2 and July 3. Operations were restored within about a week and fully resumed on July 9. The company disclosed the data theft in January 2026 in a filing with the Maine Attorney General, reported by BleepingComputer and Security Affairs.
The notice letters went to 42,521 people. The affected records are employment and job applicant records, and what was involved varies by person. Reports say it included names, birth dates, Social Security numbers and job-related details.
If you worked or applied at Ingram Micro, a Social Security number and birth date are enough for identity theft, and job details make a fake HR or recruiter message look real. The company offers two years of free credit monitoring and identity theft protection.
Ingram Micro hasn't confirmed who was responsible. Reports say the Safepay group claimed the attack.
The breach notice reached people months after the attack, so check any letter against the dates above. It arrived in January 2026, roughly six months after the files were copied.
What to do if you were in it
- 1
Freeze your credit at all three bureaus
A freeze is free and stops anyone opening new credit in your name. Set it up at Equifax, Experian and TransUnion, and lift it only when you apply for credit yourself.
- 2
Use the free credit monitoring if you were offered it
Ingram Micro offers two years of free credit monitoring and identity theft protection. Sign up with the code in your letter before it expires, and read your statements for charges you don't recognize.
- 3
Be wary of HR and recruiter messages
Messages that mention your job or application can be scams. Verify through the company's official channels.
- 4
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which breaches include your email address or phone number. Serus keeps monitoring breach databases and the dark web and alerts you when something new turns up.
Frequently asked
Was I affected by the Ingram Micro data breach?
Ingram Micro notified 42,521 people, mainly current or former employees and job applicants. Look for a letter.
What was exposed?
Names, birth dates, Social Security numbers and job-related details, depending on the person.
Should I freeze my credit?
If your Social Security number was involved, yes. It's free and blocks new accounts opened in your name.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
