Michigan Sugar Company, an agricultural/food processing cooperative, experienced an external system breach (hacking) that occurred on August 14, 2025. The company discovered this breach on December 17, 2025, and subsequently began notifying affected individuals on January 30, 2026. The notification process was handled via mailed letters and state Attorney General filings, including one with the Massachusetts Attorney General.
The breach involved names and other personal identifiers. The exact fields of sensitive information are not fully specified, but the company offered 12 months of credit monitoring and identity restoration services through IDX, suggesting that personally identifiable information was compromised. A total of 16,689 individuals are estimated to have been affected by this incident. The extent to which SSN, medical, or financial data was involved has not been publicly confirmed.
While details can emerge later and notices may be delayed, the company has provided notifications and protection services to those impacted.