WEL Companies welcompanies.com

WEL Companies data breach: what happened and what to do

WEL Companies, a logistics company, had a network disruption on January 31, 2025 and found that files were taken on March 28, 2025. About 123,000 people were notified in November 2025. Reported data includes names, Social Security numbers and driver's license numbers.

View all 13,115 breaches
Breach date
31 Jan 2025
Affected
122,960
Data exposed
Names, Social security numbers, Driver's licenses
Last updated

WEL Companies, Inc. is a logistics company. In November 2025 it began notifying people that attackers had taken files from its network earlier that year.

What happened

The company's notice says it had a network disruption on January 31, 2025. The investigation later found that certain files were acquired without authorization on March 28, 2025. A Maine filing dated November 19, 2025 shows letters going out by first class mail. Comparitech reports that about 122,960 people were notified.

The ransomware group RansomHub claimed the attack in February 2025 and said it took 189 GB of data. WEL has not verified that claim.

What was exposed

Press and legal coverage of the notices lists names, Social Security numbers and driver's license or state ID numbers. The exact data differs by person, so check your own letter.

A Social Security number together with a driver's license number is enough to open accounts or file for benefits in your name. Because many of those affected are current or former employees and drivers, expect fake payroll, benefits or HR messages.

The company's response

WEL is offering complimentary identity monitoring through Kroll, which includes credit monitoring, fraud consultation and identity theft restoration. It says it has no current evidence of misuse of any personal information.

What to do if you were in it

  1. 1

    Freeze your credit at all three bureaus

    Freezing your credit at Equifax, Experian and TransUnion stops anyone opening new accounts in your name. It's free and you can lift it when you need credit.

  2. 2

    Enroll in the Kroll monitoring

    Use the activation code in your letter before the deadline. It includes credit monitoring and restoration help.

  3. 3

    Replace your driver's license number if it's misused

    If you see signs your license number is being used, contact your state DMV about a replacement.

  4. 4

    Be skeptical of HR or payroll messages

    If you're a current or former employee, confirm any request for details through a contact you already know.

  5. 5

    Check whether your email or phone is in this and other breaches

    A free Serus scan checks breach databases for your email and phone number and tells you what to do about what it finds. Serus can't remove data from a breach, but it alerts you when your details turn up.

Frequently asked

Was I affected by the WEL Companies data breach?

WEL mailed notices in November 2025. If you worked or dealt with the company and got no letter, contact WEL.

How many people were affected?

About 123,000, according to Comparitech's report on the notices.

What was exposed?

Names, Social Security numbers and driver's license or state ID numbers.

Is there a settlement?

None of our sources reports one.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Serus

Check if you're exposed in a breach with Serus

Find your leaks. Get alerted to new ones.

Run a free scan

Related guides

All guides

Related articles

All articles

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.