ClassAction.org reported on September 21, 2026, that Flex may have experienced a data breach after the ransomware group Metaencryptor claimed responsibility for an attack. The report attributed the claim to Ransomware.live and said the alleged attack involved approximately 365 gigabytes of data. A separate cybersecurity blog reportedly linked the same claim to Flex.
The available reports do not identify the number of affected individuals or confirm whether Social Security numbers, medical information, financial information, or other personal data were exposed. Flex's discovery date, regulator notifications, consumer notifications, and any official breach notice have not been disclosed in the provided sources. ClassAction.org said attorneys were investigating whether a class action could be filed; no filed case or MDL was identified in the provided research.