Smyth Companies, LLC, a manufacturing and distribution company, was targeted in a Chaos ransomware attack. The incident was discovered on March 20, 2026, with the ransomware group claiming to have exfiltrated 1000 GB of high-value corporate data. The group stated that the negotiation window for a settlement was closed, threatening full public disclosure of the exfiltrated data.
The specific types of personal data, such as Social Security numbers, medical information, or financial details, that may have been exposed are not clear from the available reports. While threat intelligence detected infostealer activity with compromised user and employee credentials, there is no confirmation of personal data exposure or official notifications issued by the company. No specific number of affected individuals or states affected has been reported by Smyth Companies, LLC or regulatory bodies. As of the reported date, there were no official breach notifications, legal actions, or regulatory filings.
Details about this incident are based on ransomware leak site claims and threat intelligence, with no official company or regulatory confirmations available. Information may emerge after the reported date, and official notices may be delayed.