Data of 42,000 people stolen in ransomware attack at Ingram Micro

The personal information of 42,521 employees and job applicants was stolen during a ransomware attack at Ingram Micro last year.

On July 3rd, 2025, Ingram Micro, a distributor of information technology products and services, discovered that it had been hit by a ransomware attack. A threat actor managed to gain access to some of the company’s internal systems.

The attack caused a massive IT failure at the company. Ingram Micro’s websites and customer portals were unavailable due to “technical issues,” which led to a lot of complaints on social media, including Reddit.

“Based on our investigation, we determined that an unauthorized third party took certain files from some of our internal file repositories between July 2nd and 3rd, 2025,” Ingram Micro said in a public statement at the time.

The files that were exfiltrated included employment and job applicant records, containing personal information such as names, contact information, dates of birth, government-issued identification numbers like social security numbers, passport numbers, and driver’s license numbers, and employment-related information, including evaluations.

According to a recently published data breach notification addressed to the Office of the Maine Attorney General, a total of 42,521 people were affected by this data breach.

A few days after the ransomware attack, it was confirmed that a ransomware operation called SafePay was responsible for the attack.

The group is known for breaching corporate networks through VPN gateways using compromised credentials and password-spraying attacks.

Between July 7th and 8th, some of the services of Ingram Micro came back online. In addition, the tech company implemented additional security and monitoring measures.

Unlock more exclusive Cybernews content on YouTube.