2025 Steel Warehouse — ransomware (Cactus); filings Apr-May 2026
Data compromised
Names, SSNs, addresses, dates of birth, driver's licenses or comparable government identifiers, passports or financial-card numbers referenced in disclosures
Technical writeup
Steel Warehouse Company, LLC (Indiana metals processor and distributor) surfaced in multi-regulator summaries in spring 2026 (notably filings summarized for Texas on April 30, 2026 and Vermont regulators in the same period). Specialized breach bulletins attribute a February 24, 2025 dark-web ransom claim by Cactus to the episode and recount large archival theft affecting employee and counterpart PII. At least 439 notified Texas residents were cited while aggregate national counts remained publicly incomplete in summaries reviewed for this BreachHistory row.
Root cause
Ransomware/extortion-led theft of enterprise and workforce data