Steel Warehouse Company Hit by Cactus Ransomware Attack, Exposing Sensitive Data
Steel Warehouse Company LLC, a family-owned steel processor and distributor based in South Bend, Indiana, suffered a significant data breach following a ransomware attack by the cybercriminal group Cactus. The breach was first disclosed to the Vermont Attorney General on April 30, 2026, though the attackers claimed responsibility on February 24, 2025, via a dark web posting.
The hackers exfiltrated 679 GB of data, including personally identifiable information (PII), corporate documents, financial records, and internal communications. Exposed consumer data includes:
- Names
- Addresses
- Social Security numbers
- Driver’s license and government-issued ID numbers
- Dates of birth
- Financial information (credit/debit card details)
While the full scope of affected individuals remains unclear, at least 439 Texas residents were confirmed impacted. The law firm Shamis & Gentile P.A. is investigating potential compensation claims for those whose data was compromised.
Steel Warehouse, a global supplier serving industries like automotive, aerospace, and energy, has been in operation since 1947. The breach highlights ongoing risks to supply chain and industrial sectors from ransomware threats.
Source: https://www.claimdepot.com/investigations/steel-warehouse-data-breach-2026
Steel Warehouse cybersecurity rating report: https://www.rankiteo.com/company/steel-warehouse
"id": "STE1777674351",
"linkid": "steel-warehouse",
"type": "Ransomware",
"date": "2/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'At least 439 Texas residents',
'industry': 'Steel Processing and Distribution',
'location': 'South Bend, Indiana, USA',
'name': 'Steel Warehouse Company LLC',
'type': 'Company'}],
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': ['Names',
'Addresses',
'Social Security '
'Numbers',
'Driver’s License and '
'Government-Issued ID '
'Numbers',
'Dates of Birth',
'Financial '
'Information '
'(Credit/Debit Card '
'Details)'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Corporate Documents',
'Financial Records',
'Internal Communications']},
'date_publicly_disclosed': '2026-04-30',
'description': 'Steel Warehouse Company LLC, a family-owned steel processor '
'and distributor based in South Bend, Indiana, suffered a '
'significant data breach following a ransomware attack by the '
'cybercriminal group Cactus. The breach exposed 679 GB of '
'data, including personally identifiable information (PII), '
'corporate documents, financial records, and internal '
'communications.',
'impact': {'data_compromised': '679 GB',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'Cactus'},
'references': [{'date_accessed': '2025-02-24', 'source': 'Dark Web Posting'}],
'regulatory_compliance': {'legal_actions': 'Potential compensation claims '
'being investigated by Shamis & '
'Gentile P.A.',
'regulatory_notifications': 'Disclosed to Vermont '
'Attorney General'},
'threat_actor': 'Cactus',
'title': 'Steel Warehouse Company Hit by Cactus Ransomware Attack, Exposing '
'Sensitive Data',
'type': 'Ransomware'}