SMC Data Breach Impacts 6,566: Social Security Numbers Exposed

On January 10, 2025, SMC Corporation of America discovered a significant data breach affecting 6,566 individuals in the United States, including 8 residents of Maine and 75 residents of Massachusetts.

The breach was identified after a foreign cyber threat actor attempted to disrupt SMC’s IT infrastructure, possibly intending to deploy ransomware and solicit a ransom payment. The unauthorized access allowed the threat actor to obtain sensitive personal information of current and former employees in the U.S. and Canada.

Information Exposed

• First and last name
• Date of birth
• Address
• Bank account information
• Driver’s licenses
• Certain payroll information
• SMC employee account number and position
• Social Security Number
• SMC employee benefit information
• Data related to certain medical information
• Other identifying information

The breach was disclosed to the Maine Attorney General's office on February 25, 2025, and to the Massachusetts Attorney General's office on February 24, 2025.

SMC Corporation of America's Response

In response to the breach, SMC Corporation of America quickly took action to block unauthorized access to its systems and launched an investigation with the help of cybersecurity experts. The company is working with law enforcement to address the incident and prevent future breaches. SMC has also enhanced its cybersecurity measures to safeguard against similar threats.

For those affected, SMC is offering Experian IdentityWorks credit monitoring services for 24 months at no cost. This service includes credit monitoring, internet surveillance, identity restoration, and $1 million in identity theft insurance. Affected individuals are encouraged to enroll in these services by May 30, 2025, and to remain vigilant by monitoring their financial accounts and credit reports for any suspicious activity.