Columbia Machine Inc. Discloses Data Breach Affecting 1,276 Washington Residents
Columbia Machine Inc., a Vancouver, Washington-based manufacturing company, reported a data breach involving sensitive personal information of 1,276 Washington residents. The incident was disclosed to the Washington Attorney General on July 9, 2026, with notifications sent to affected individuals the same day.
The breach was detected on April 5, 2026, after the company identified suspicious activity and data encryption within its systems. An investigation, conducted with third-party forensic specialists, revealed that an unauthorized actor accessed Columbia Machine’s network between March 27 and April 5, 2026, viewing and exfiltrating files.
Initially, forensic analysis suggested only non-confidential company documents were compromised. However, a subsequent review uncovered additional files containing sensitive personal data. Due to the complexity of the investigation, the company completed its final assessment on June 18, 2026, confirming exposure of personal information.
The compromised data varied by individual and included names, Social Security numbers, driver’s license or Washington ID numbers, full dates of birth, and passport numbers.
In response, Columbia Machine is offering 24 months of free credit monitoring and identity protection services through Experian IdentityWorks, including credit reports, daily monitoring, identity restoration support, and $1 million in identity theft insurance. Affected individuals can enroll by October 31, 2026, via Experian’s enrollment page or a dedicated phone line. Further inquiries can be directed to Columbia Machine at PrivacyNotice@colmac.com or the same support line.
Source: https://www.claimdepot.com/data-breach/columbia-machine-2026
Columbia Machine, Inc. cybersecurity rating report: https://www.rankiteo.com/company/columbia-machine-inc.
"id": "COL1786984036",
"linkid": "columbia-machine-inc.",
"type": "Breach",
"date": "3/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '1276',
'industry': 'Manufacturing',
'location': 'Vancouver, Washington, USA',
'name': 'Columbia Machine Inc.',
'type': 'Manufacturing Company'}],
'attack_vector': 'Unauthorized network access',
'customer_advisories': '24 months of free credit monitoring and identity '
'protection services through Experian IdentityWorks',
'data_breach': {'data_encryption': 'Yes',
'data_exfiltration': 'Yes',
'number_of_records_exposed': '1276',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Driver’s license or Washington '
'ID numbers',
'Full dates of birth',
'Passport numbers']},
'date_detected': '2026-04-05',
'date_publicly_disclosed': '2026-07-09',
'description': 'Columbia Machine Inc., a Vancouver, Washington-based '
'manufacturing company, reported a data breach involving '
'sensitive personal information of 1,276 Washington residents. '
'The breach was detected after suspicious activity and data '
'encryption were identified within its systems. An '
"unauthorized actor accessed the company's network, viewing "
'and exfiltrating files containing personal data.',
'impact': {'data_compromised': 'Sensitive personal information',
'identity_theft_risk': 'High',
'systems_affected': 'Company network and file systems'},
'investigation_status': 'Completed',
'post_incident_analysis': {'corrective_actions': 'Credit monitoring and '
'identity protection '
'services for affected '
'individuals',
'root_causes': 'Unauthorized network access and '
'data exfiltration'},
'ransomware': {'data_encryption': 'Yes', 'data_exfiltration': 'Yes'},
'references': [{'source': 'Washington Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'Washington Attorney '
'General'},
'response': {'communication_strategy': 'Notifications sent to affected '
'individuals and Washington Attorney '
'General',
'containment_measures': 'Investigation and system review',
'remediation_measures': 'Credit monitoring and identity '
'protection services',
'third_party_assistance': 'Third-party forensic specialists'},
'title': 'Columbia Machine Inc. Data Breach Affecting 1,276 Washington '
'Residents',
'type': 'Data Breach'}