Cornwell Quality Tools, based in Wadsworth, Ohio, suffered a data breach in December 2024, exposing sensitive personal information of current and former employees. The compromised data includes names, Social Security Numbers, medical records, and financial account details, which may have been stolen and offered for sale on the dark web. The breach has prompted legal investigations by Wolf Haldenstein Adler Freeman & Herz LLP, a consumer rights law firm, on behalf of affected individuals. Victims have reported suspicious activity linked to their exposed data, indicating potential misuse. The incident underscores significant risks to employee privacy and financial security, with long-term repercussions for identity theft and fraud. Cornwell has initiated notifications to impacted individuals, but the breach’s full scope and the attackers’ motives remain undisclosed.

The Maine Attorney General's Office reported a data breach involving Cornwell Quality Tools on August 29, 2023. The breach occurred on September 22, 2022, due to an external system breach (hacking) potentially affecting the personal information of 74 Maine residents, including names, Social Security numbers, and driver's license numbers. Cornwell is offering complimentary credit monitoring and identity protection services through IDX.

Cornwell Quality Tools suffered a ransomware attack in December 2024, attributed to the Cactus ransomware group. The breach compromised 103,782 individuals' sensitive data, including Social Security numbers, medical information, financial account details, driver’s license scans, tax documents, and credit applications. The attackers claimed to have stolen 4.6 TB of data, posting sample documents as proof. The incident disrupted Cornwell’s Tech-Credit payment portal, rendering it unavailable. While the company took immediate action—securing systems, engaging cybersecurity experts, and offering victims 12 months of credit monitoring and $1M in identity fraud insurance—the full extent of the financial or operational damage remains undisclosed. This marks Cornwell’s second ransomware attack in two years, following a 2022 Hive ransomware breach that exposed 11,884 records. The 2024 attack is the largest manufacturing sector breach of the year by records affected.