Drummond Company Data Breach Exposes Personal Information, Including SSNs Drummond Company, a privately owned mining and metals firm based in Birmingham, Alabama, disclosed a data breach involving unauthorized access to an employee’s email account. The incident was discovered on February 23, 2026, with affected individuals notified via letters dated March 31, 2026. An investigation revealed that files within the compromised email account may have been accessed by an unauthorized third party, though the exact method of intrusion and the duration of access were not disclosed. Exposed data included names, Social Security numbers, and financial account numbers though PINs and access codes were not part of the breach. To mitigate risks, Drummond is offering 24 months of complimentary credit monitoring through Cyberscout (a TransUnion company), including single-bureau credit monitoring, reports, and scores with same-day alerts for changes. Affected individuals must enroll within 90 days of receiving their notification letter. The company has also established a dedicated support team (available 7 a.m.–7 p.m. CDT, Monday–Friday) to assist with questions or fraud concerns. While the total number of affected individuals remains undisclosed, Drummond has advised impacted parties to monitor financial accounts, review credit reports, and consider placing fraud alerts or security freezes with major credit bureaus. The breach has not been linked to any reported fraud cases to date.