New Congoleum Data Breach Exposes Sensitive Information of Nearly 5,000 Individuals On March 24, 2026, New Congoleum LLC a subsidiary of Beaulieu International Group (B.I.G.) and a leading U.S. manufacturer of resilient flooring detected unusual activity within its network. The company, which operates under the legacy Congoleum brand (founded in 1886), launched an investigation with independent cybersecurity experts to assess the breach’s scope and secure its systems. The probe confirmed that sensitive personally identifiable information (PII) was compromised, including names and Social Security numbers. A total of 4,831 individuals across the U.S. were affected, with six in Maine and three in Vermont among those impacted. Written notifications were sent to affected parties on May 8, 2026. Shamis & Gentile P.A., a class-action law firm specializing in data breach cases, is now investigating the incident to determine potential compensation for those exposed. The breach highlights ongoing risks to corporate data security, particularly for organizations handling large volumes of consumer information.

On August 7, 2024, the Maine Attorney General's Office reported a data breach involving Congoleum Acquisition LLC. The breach, discovered on June 30, 2024, affected 1,661 individuals, including 2 Maine residents. The breach was categorized as an external system breach (hacking), and the types of information involved included names and Social Security numbers. Congoleum offered identity theft protection services through IDX, which includes 12 months of credit monitoring.