Sugar and Steel Corporation

Sugar Steel Corporation reported an external system breach (hacking) occurring on December 8, 2020, discovered on December 22, 2020. The incident compromised the names and Social Security Numbers of 6,276 individuals, including 2 Maine residents. The company notified affected individuals in writing on September 17, 2021, and provided 12 months of credit monitoring and identity theft restoration services through IDX.

Affected (this filing): 6,276

Sugar Steel Corporation experienced unauthorized access to two employee email accounts between December 8 and 22, 2020. An unknown actor accessed the accounts, potentially viewing or removing personal information including names and variable data. The company implemented multi-factor authentication, offered credit monitoring and identity theft restoration services, and notified state regulators.