Electric Research and Manufacturing Cooperative, Inc. (ERMCO), a manufacturer of distribution transformers headquartered in Dyersburg, Tennessee, disclosed a data breach to the Massachusetts Attorney General on September 25, 2026. The company mailed notification letters to impacted individuals. The public disclosure did not specify the exact date when the incident occurred or when ERMCO discovered the breach.
The breach exposed data including names, Social Security numbers, driver's license or state identification card numbers, passport numbers, medical records/information, health insurance information, and financial information. At least three individuals in Massachusetts were affected, with the potential for a higher impact across other states. The full scope of the breach, including the total number of affected individuals and specific financial data fields, remains unclear publicly.
A class-action lawsuit, HEATH v. ERMCO INC, was filed in the District Court, S.D. Indiana, on April 23, 2026, related to this incident. Additional details regarding the incident's timeline and affected population may emerge as the investigation and legal proceedings continue. ERMCO has reportedly offered affected individuals 24 months of Kroll identity-monitoring services.