Data Breach at Ingram Micro: What Happened?

Ingram Micro, a key player in the IT distribution sector, has confirmed a major data breach following a ransomware attack in July 2025. This incident exposed sensitive personal information of more than 42,000 employees and job applicants. The company’s report to the Maine Attorney General highlights that names, contact information, dates of birth, Social Security numbers, and driver’s licenses were among the compromised data.

The attack was discovered shortly after it began on July 2, prompting an immediate shutdown of Ingram’s systems to mitigate the damage. Moreover, employment-related data, such as performance reviews, was also affected. As part of its response, Ingram engaged expert cybersecurity consultants and brought the situation to the attention of law enforcement.

The Aftermath and Ongoing Concerns

The ransomware group SafePay claimed responsibility, asserting the theft of 3.5 terabytes of data. This breach caused notable disruptions, including temporary closures of several Ingram regional offices. Despite the severity, Ingram’s communication strategy has been criticized for its perceived lack of transparency, leaving many concerned about accessing timely information.

SafePay extended a deadline for ransom payment, and as the deadline lapsed without payment, they allegedly released the stolen data. However, the provided download link was non-functional. While Ingram Micro remains under scrutiny as more details unfold, the incident has undeniably impacted its operations and financial health.

Stay informed with Qsentinel for the latest updates on this unfolding story. Follow trusted news sources for comprehensive coverage.

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.