🏢 Ingram Micro, one of the world’s largest B2B technology distributors, has confirmed that a ransomware attack in July 2025 resulted in a data breach affecting 42,000+ people.
📅 What happened
• Attackers accessed internal file repositories between July 2–3, 2025
• Unauthorized data exfiltration occurred before ransomware deployment
🪪 Data exposed
• Social Security numbers
• Passport & driver’s license details
• Dates of birth
• Contact information
• Employment and applicant records
🌐 Operational impact
• Internal systems and website went offline
• Employees were instructed to work remotely during recovery
🕵️♂️ Threat actor activity
• Ransomware was confirmed on affected systems
• The SafePay ransomware group later claimed responsibility
• Attackers allege theft of 3.5TB of documents
• Double-extortion tactics used (theft + leak threats)
📈 Why it matters
SafePay has become one of the most active ransomware operations in 2025, filling the gap left by LockBit and ALPHV, and increasingly targeting large technology and supply-chain organizations.
🛡️ This incident underscores how ransomware continues to cause both operational disruption and long-term data exposure risks.
