Cornwell Quality Tools Suffers Data Breach, 100,000 User Records Exposed

Cornwell Quality Tools, a leading automotive and industrial tool supplier, has confirmed a significant data breach that compromised the personal information of 103,782 individuals.

The cybersecurity incident occurred on December 12, 2024, when unauthorized attackers gained access to the company’s computer network, exposing sensitive customer data including names, Social Security numbers, medical information, and financial account details.

Breach Details and Timeline

The unauthorized intrusion into Cornwell’s systems resulted in the exposure of both personally identifiable information (PII) and protected health information (PHI).

The compromised data encompassed a wide range of sensitive information that could potentially be used for identity theft and financial fraud.

The breach affected over 100,000 individuals who had their personal data stored within Cornwell’s network infrastructure.

Following the discovery of the security incident, Cornwell initiated an investigation to determine the scope and impact of the breach.

The company worked to secure their systems and assess what information was accessed during the unauthorized intrusion.

Affected individuals received official breach notification letters dated September 4, 2024, nearly nine months after the initial incident.

This notification timeline follows standard data breach disclosure requirements, though the delay between the breach occurrence and customer notification highlights the complex investigation process typically required following such incidents.

Sample data breach notification letter informing a user about unauthorized access to personal medical and financial information and steps to protect themselves 

The notification letters informed recipients about the types of personal information that were compromised and provided guidance on protective measures they should consider taking.

These communications are legally mandated under various data protection regulations to ensure affected individuals can take appropriate steps to protect themselves from potential misuse of their personal information.

The data breach has prompted legal action, with Goldenberg Schneider, LPA announcing their investigation into the incident on behalf of affected individuals.

The law firm is providing assistance to those who received breach notification letters and may have grounds for legal recourse due to the exposure of their sensitive information.

Affected customers seeking additional information about their legal rights can contact the investigating law firm through multiple channels, including phone consultations and online contact forms.

This legal support reflects the serious nature of the breach and the potential long-term consequences for affected individuals.

The Cornwell Quality Tools data breach serves as another reminder of the ongoing cybersecurity challenges facing businesses across all industries, particularly those handling sensitive customer information including financial and health data.

Find this Story Interesting! Follow us on LinkedIn and X to Get More Instant Updates.