PinnPACK appeared on the Worldleaks ransomware leak site on July 21, 2026. The ransomware group listed PinnPACK as a victim and claimed to have exfiltrated internal files. This information comes from reports by security researchers monitoring ransomware activity. The Worldleaks posting did not specify data volumes, affected categories, or ransom details.
The available sources do not confirm the number of affected individuals or specific data types involved beyond "internal files exfiltrated." It is not confirmed if names, SSNs, financial data, or medical data were exposed. No state attorney general filings, official breach notification letters, or official company statements from PinnPACK have been found. It is also not publicly reported how many individuals, if any, were notified.
Further details regarding this incident, including confirmation from PinnPACK or regulators, have not yet been disclosed. Details can emerge later, and notices to individuals may be delayed.