Karndean Designflooring, a luxury vinyl flooring manufacturer, suffered a severe cyberattack executed by the CRYPTO24 ransomware group starting August 15, 2025. The attackers exfiltrated and publicly leaked over 600 GB of sensitive data, including personally identifiable information (PII) such as names, Social Security numbers, driver’s license/state ID details, and financial account information. The breach exposed both employees and customers to high risks of identity theft and financial fraud, though the exact number of affected individuals remains undisclosed. The company reported the incident to the Massachusetts Attorney General’s office on September 30, 2025, and committed to notifying impacted parties via mail. The breach’s scale—combining ransomware deployment, massive data theft, and exposure of critical financial/PII—positions it as a high-severity incident with long-term reputational, operational, and legal repercussions. Victims were advised to monitor accounts, implement credit freezes, and remain vigilant against phishing attempts linked to the stolen data.