INGRAM MICRO INC.

Ingram Micro Inc. notified the New Hampshire Attorney General of a cybersecurity incident detected on July 3, 2025. An unauthorized party accessed internal file repositories between July 2 and 3, 2025, exfiltrating employment and job applicant records. Affected data included names, contact info, SSNs, driver's licenses, passport numbers, and health/insurance information. Approximately 40 New Hampshire residents (current/former employees and applicants) were notified. Ingram Micro engaged forensic experts, notified law enforcement, took systems offline, and offers two years of credit monitoring.

Ingram Micro Inc. based in Irvine, California, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-12-26 and reported on 2026-01-21. 3,079 Texas residents were affected. 42,521 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Medical Information;Health Insurance Information;Other;Date of Birth. Consumers were notified via U.S. Mail.

Ingram Micro Inc detected a cybersecurity incident on July 3, 2025, involving unauthorized access to internal file repositories between July 2 and July 3, 2025. An unauthorized third party exfiltrated files containing personal information of employees and job applicants, including names, contact info, dates of birth, government-issued IDs (SSN, driver's license, passport), health information, and employment records. The company contained the incident, engaged forensic experts, notified law enforcement, and is offering two years of credit monitoring.

Ingram Micro, Inc. reported a breach occurring on July 2–3, 2025. The nature of the intrusion is not described in detail in the consumer notification. Affected individuals were offered two years of complimentary Experian IdentityWorks credit monitoring and identity protection services. Notifications were sent to residents of multiple US states.

Ingram Micro Inc. notified Vermont AG of a cybersecurity incident detected July 3, 2025. An unauthorized third party accessed internal file repositories between July 2-3, 2025, exfiltrating employment and job applicant records containing PII, SSNs, and government IDs. Ingram Micro took systems offline, engaged cybersecurity experts, notified law enforcement, and is offering two years of credit monitoring.

Ingram Micro Inc. reported an external system breach (hacking) occurring July 2-3, 2025, discovered December 26, 2025. 42,521 individuals affected, including 5 Maine residents. Employment and job applicant records containing PII and government IDs were accessed. The company engaged cybersecurity experts, notified law enforcement, and offered 24 months of credit monitoring.

Ingram Micro Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-07-02 and was reported on 2026-01-16. 4,136 Indiana residents were affected. 42,521 individuals affected in total.

Ingram Micro Inc notified Nebraska residents of a cybersecurity incident detected on July 3, 2025. Unauthorized access to internal file repositories occurred between July 2 and 3, 2025, resulting in the exfiltration of employment and job applicant records. Affected data includes names, contact info, DOB, government IDs (SSN, driver's license, passport), and health/insurance information. Ingram Micro took systems offline, engaged cybersecurity experts, notified law enforcement, and offered two years of complimentary credit monitoring and identity protection services. Notices were sent on January 16, 2026.

INGRAM MICRO INC. filed a data-breach notice with the Illinois Attorney General in January 2026 (case 26-01-737). The register records the breach as discovered on December 26, 2025. Personal information types reported: drivers license, financial account number, medical information, passport number, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Ingram Micro is a global technology and supply chain services provider. The company, established in 1979, offers a broad range of solutions and services to businesses around the globe, including cloud, mobility, supply chain, and technology solutions. It serves markets including IT, telecommunications, consumer electronics, and others.

Ingram Micro Holding Corporation filed an 8-K on July 7, 2025, reporting that it issued a press release on July 5, 2025 stating it had identified ransomware on certain internal systems. The company took systems offline, engaged cybersecurity experts, and notified law enforcement. The incident is active as the company works to restore systems to process and ship orders.