Cornwell Quality Tools, based in Wadsworth, Ohio, suffered a data breach in December 2024, exposing sensitive personal information of current and former employees. The compromised data includes names, Social Security Numbers, medical records, and financial account details, which may have been stolen and offered for sale on the dark web. The breach has prompted legal investigations by Wolf Haldenstein Adler Freeman & Herz LLP, a consumer rights law firm, on behalf of affected individuals. Victims have reported suspicious activity linked to their exposed data, indicating potential misuse. The incident underscores significant risks to employee privacy and financial security, with long-term repercussions for identity theft and fraud. Cornwell has initiated notifications to impacted individuals, but the breach’s full scope and the attackers’ motives remain undisclosed.
TPRM report: https://www.rankiteo.com/company/cornwell-quality-tools
"id": "cor5992959093025",
"linkid": "cornwell-quality-tools",
"type": "Breach",
"date": "12/2024",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Tools Manufacturing/Retail',
'location': 'Wadsworth, Ohio, USA',
'name': 'Cornwell Quality Tools',
'type': 'Company'}],
'customer_advisories': 'Employees and former employees notified of potential '
'data exposure and risk of identity theft',
'data_breach': {'data_exfiltration': 'Likely (data offered for sale on dark '
'web)',
'personally_identifiable_information': ['names',
'Social Security '
'Numbers',
'medical information',
'financial account '
'numbers'],
'sensitivity_of_data': 'High (includes SSNs, medical, and '
'financial data)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Protected Health Information '
'(PHI)',
'Financial Information']},
'date_publicly_disclosed': '2025-09-29',
'description': 'Cornwell Quality Tools announced that the personal '
'information of employees and former employees may have been '
'stolen as part of a data breach which occurred in December '
'2024. The compromised data includes names, Social Security '
'Numbers, medical information, and financial account numbers, '
'which may be offered for sale on the dark web.',
'impact': {'brand_reputation_impact': 'Potential (data offered for sale on '
'dark web)',
'data_compromised': ['names',
'Social Security Numbers',
'medical information',
'financial account numbers'],
'identity_theft_risk': 'High (PII including SSNs and financial '
'data exposed)',
'legal_liabilities': 'Under investigation by Wolf Haldenstein '
'Adler Freeman & Herz LLP',
'payment_information_risk': 'High (financial account numbers '
'compromised)'},
'initial_access_broker': {'data_sold_on_dark_web': 'Likely (per press '
'release)',
'high_value_targets': 'Employee and former employee '
'PII/PHI/financial data'},
'investigation_status': 'Ongoing (legal investigation by Wolf Haldenstein)',
'references': [{'date_accessed': '2025-09-29',
'source': 'Globe Newswire Press Release'}],
'regulatory_compliance': {'legal_actions': 'Investigation by Wolf Haldenstein '
'Adler Freeman & Herz LLP for '
'potential class-action '
'litigation'},
'response': {'communication_strategy': 'Public disclosure via press release; '
'notification letters sent to affected '
'individuals'},
'stakeholder_advisories': 'Affected individuals notified via letters; public '
'advisory issued',
'title': 'Cornwell Quality Tools Data Breach',
'type': 'Data Breach'}