WEL Companies data breach: what happened and what to do
WEL Companies, a logistics company, had a network disruption on January 31, 2025 and found that files were taken on March 28, 2025. About 123,000 people were notified in November 2025. Reported data includes names, Social Security numbers and driver's license numbers.
View all 13,115 breaches- Breach date
- 31 Jan 2025
- Affected
- 122,960
- Data exposed
- Names, Social security numbers, Driver's licenses
- Last updated
WEL Companies, Inc. is a logistics company. In November 2025 it began notifying people that attackers had taken files from its network earlier that year.
What happened
The company's notice says it had a network disruption on January 31, 2025. The investigation later found that certain files were acquired without authorization on March 28, 2025. A Maine filing dated November 19, 2025 shows letters going out by first class mail. Comparitech reports that about 122,960 people were notified.
The ransomware group RansomHub claimed the attack in February 2025 and said it took 189 GB of data. WEL has not verified that claim.
What was exposed
Press and legal coverage of the notices lists names, Social Security numbers and driver's license or state ID numbers. The exact data differs by person, so check your own letter.
A Social Security number together with a driver's license number is enough to open accounts or file for benefits in your name. Because many of those affected are current or former employees and drivers, expect fake payroll, benefits or HR messages.
The company's response
WEL is offering complimentary identity monitoring through Kroll, which includes credit monitoring, fraud consultation and identity theft restoration. It says it has no current evidence of misuse of any personal information.
What to do if you were in it
- 1
Freeze your credit at all three bureaus
Freezing your credit at Equifax, Experian and TransUnion stops anyone opening new accounts in your name. It's free and you can lift it when you need credit.
- 2
Enroll in the Kroll monitoring
Use the activation code in your letter before the deadline. It includes credit monitoring and restoration help.
- 3
Replace your driver's license number if it's misused
If you see signs your license number is being used, contact your state DMV about a replacement.
- 4
Be skeptical of HR or payroll messages
If you're a current or former employee, confirm any request for details through a contact you already know.
- 5
Check whether your email or phone is in this and other breaches
A free Serus scan checks breach databases for your email and phone number and tells you what to do about what it finds. Serus can't remove data from a breach, but it alerts you when your details turn up.
Frequently asked
Was I affected by the WEL Companies data breach?
WEL mailed notices in November 2025. If you worked or dealt with the company and got no letter, contact WEL.
How many people were affected?
About 123,000, according to Comparitech's report on the notices.
What was exposed?
Names, Social Security numbers and driver's license or state ID numbers.
Is there a settlement?
None of our sources reports one.
Sources
Something wrong or out of date? Tell us and we'll re-check it.