9-25 July 2026: WireCo WorldGroup says unauthorised activity hit its network, found on 25 July. Texas AG nationwide total: 4,005 people. Letters from 16 October. See the WireCo breach record.
Qilin listed WireCo on 26 August and claimed 3 TB / 1,696,196 files. Treat that brand and volume as unverified on top of the confirmed access. 24 months Experian. HR line 816-270-4700.
What happened at WireCo?
Unauthorised activity 9-25 July, found the last day of that window. The company notified people from 16 October and filed with Massachusetts and Texas. Leawood, Kansas manufacturer of wire rope and related products. Current and former employees are the population named in secondary reporting.
A ransomware listing after a confirmed window is common and still unverified until WireCo names the brand. Catalog the AG census. Keep Qilin in the actor column as a claim.
What data was exposed?
Name plus one or more of address, date of birth, SSN, TIN, driver licence, other government ID, medical, health insurance, financial account, credit or debit card. Mix varies. recordsAffected is 4005.
Employee HR files with SSNs, medical and cards are a high-sensitivity mix. Freeze credit. Watch insurer mail.
The Baker Tilly post is a larger November SSN census.
Who is affected?
4,005 people in the Texas nationwide total, including 448 Texans in some extracts. Current and former employees on secondary reporting. Customers are not automatically in this row.
More on the company is on the WireCo WorldGroup company page.
What should employees do?
- Enrol in Experian with the code in the October letter, within 90 days of the letter date.
- Call HR 816-270-4700, 9 a.m. to 6 p.m. ET weekdays.
- Place a freeze if an SSN or card may be involved.
- Treat Qilin 'proof' screenshots as unverified.
- WireCo will not collect a CVV to restore payroll.
Do not download alleged 3 TB archives. This catalog does not link them.
Did Qilin do this?
Unverified. Qilin listed the firm 26 August. The company and AG filings confirm unauthorised activity and a 4,005-person notice. They do not, in the sources used here, name Qilin.
File counts on a leak site are not a people census. 1,696,196 files is not 4,005 people and is not a reason to change recordsAffected.
Frequently asked questions
How many people were affected?
4,005, the Texas AG nationwide total. 448 Texans in one extract.
When did this happen?
9-25 July 2026, found 25 July. Letters from 16 October.
Qilin?
Listed WireCo 26 August. Unverified attribution on a confirmed incident.
Were medical records involved?
Medical and health insurance are on the possible field list. Mix varies.
Customers?
Not named as the notice population. Secondary reporting describes employees.
Sourcing note: WireCo notices via Texas and Massachusetts AG extracts, secondary reporting of the 16 October letters, Qilin 26 August listing as unverified.
Do not download alleged WireCo dumps. This catalog does not link them. A later leak-site post is still an unverified brand until WireCo names it.
Compare later mail with wireco.com. WireCo will not ask for a card CVV or a one-time code through a new website to finish this investigation.
Do not merge this row with a customer-data leak. They are separate catalog files even when they share a season or a vendor class.
If you did not receive a letter, you may still be in an unpublished state filing. Ask WireCo in writing whether your identifier sits in the reached file.
US residents can place a free credit freeze at Equifax, Experian and TransUnion. Use the local freeze or watch process named in the notice if you live elsewhere.
Keep the paper letter if one arrives. A later amendment can add fields or a higher census. This catalog will move recordsAffected only when a named official source publishes a new figure. Do not treat a class-action advertisement as a census.
If two organisations share a similar name, read the company page before you enrol in monitoring. Wrong-firm sign-up pages are a common follow-on scam after a widely reported notice.
People who already froze credit last year should still read the new letter, because the field mix may differ this time. A freeze stays in place until you lift it.
Call the helpline on the letter, not a number that arrives by text the same week. Helpline hours are in the notice. After hours, use the website URL printed on the letter.