How the scam works
CARROLLTON, GA — This story is about a data breach, but it is also the kind of incident criminals often use to fuel identity theft, fake account alerts and follow-up scams. Southwire Co. LLC, a wire and cable manufacturer based in Carrollton, Georgia, says an unauthorized party accessed systems tied to its employee health and welfare plan.
The company says the intrusion happened over a stretch from November 2025 through January 2026. After discovering the problem on Jan. 29, 2026, Southwire brought in outside cybersecurity specialists and began working to understand what was taken and which people may have been affected.
Southwire later said a ransomware group known as Qilin claimed the data on the dark web in March 2026. The company’s review of the affected files was completed in late October, and it says the potentially exposed material included both personal and health-related information tied to employees.
The warning signs
- Unexpected calls, emails or texts asking you to confirm personal details, especially if the sender already knows some of your information.
- Notices about unfamiliar accounts, login attempts or password reset requests tied to your name.
- Mail about medical benefits, claims or health plan changes you do not recognize.
- Bank or credit card charges you cannot explain, even if they are small at first.
- Credit report entries for accounts or inquiries you did not authorize.
- Messages that create pressure to act immediately or to call a number included in the message.
In cases like this, criminals may try to use stolen names, Social Security numbers, dates of birth, addresses, account data or login credentials to impersonate victims. They may also use health plan details to make their messages sound legitimate.
If you've already paid or shared information
- Contact your bank, credit union or card issuer right away if any financial account information was exposed or if you spot suspicious activity.
- Change passwords for any accounts that may share credentials with the exposed login information, and choose strong, unique passwords.
- Turn on extra account alerts so you are notified about logins, transfers, purchases or profile changes.
- Review recent statements, insurance notices and medical claims for anything that does not belong to you.
- Place a fraud alert or credit freeze with the major credit bureaus if your Social Security number or other identity data may have been exposed.
- Report suspicious activity to the Federal Trade Commission at ReportFraud.ftc.gov and keep records of any incident numbers or confirmation emails.
Southwire says it is offering affected people 24 months of credit monitoring and identity protection services. If you believe you are included, use the company’s contact information from its official notice rather than relying on a message or call you did not initiate.
How to protect yourself
- Watch your financial accounts and credit reports regularly, even if you have not seen a problem yet.
- Use unique passwords for each important account so one breach does not open the door to others.
- Be skeptical of urgent messages that claim to come from your employer, insurer, bank or a government office.
- Do not give out Social Security numbers, bank details or login codes unless you independently verified who is asking.
- Consider freezing your credit if you do not expect to apply for new credit soon.
- Keep your device software and security updates current so attackers have fewer openings to exploit.
Southwire also set up a dedicated toll-free line for questions about the incident. The company says callers should be ready to provide engagement number B175949 when they call 1-833-931-3700, Monday through Friday from 8 a.m. to 8 p.m. Central Time, excluding major U.S. holidays.
The bottom line
Data breaches can create lasting problems because the stolen details may be used long after the original intrusion. In this case, Southwire says the exposed information may include both identity and health data, which is why extra monitoring is important.
If you may be affected, review your accounts, watch for unfamiliar activity and use the company’s official contact channels for guidance. Taking a few careful steps now can make it easier to spot fraud early and limit damage later.
