DisclosureLens
HackingTechnologyInformationStolen CredentialsData ExfiltratedEmployee Data InvolvedCustomer Data InvolvedEmploymentHealth (basic)Identity (basic)Government IDMediumContained

INGRAM MICRO INC.

bd_0de697dc55ff50ec · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 3, 2025

Filed

Jan 17, 2026

To disclose

28 weeks

Affected

139state residents only

Linked

10 filings

Confidence

64%
Full breach record for INGRAM MICRO INC.2 incidents on file

Ingram Micro Inc detected a cybersecurity incident on July 3, 2025, involving unauthorized access to internal file repositories between July 2 and July 3, 2025. An unauthorized third party exfiltrated files containing personal information of employees and job applicants, including names, contact info, dates of birth, government-issued IDs (SSN, driver's license, passport), health information, and employment records. The company contained the incident, engaged forensic experts, notified law enforcement, and is offering two years of credit monitoring.

Massachusetts clock MA AG >90d28 weeks discovery → filing

Incident timeline

undetected · 1 days
discovery → filing · 28 weeks / 198 days

Jul 2, 2025

Begins

Jul 3, 2025

Discovered

Jan 17, 2026

Filed

vs. sector median

+10 wks slower

This filing is one of 10 about the same incident.View merged incident
A leak claim by safepay about this victim predates this filing by 171 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Show 4 more filingsup to 16d gap

Filing propagation · 9 filings · 9 states

View merged incident ↗

Pattern: first filing Jan 1 (IL), last Jan 23 (NH) — a 22-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.