On March 5, 2024, CAIRE, Inc. filed a notice of data breach with the Attorney General of Vermont after discovering that an unauthorized party had gained access to its IT network. In this notice, CAIRE explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, passport numbers, driver’s license numbers, state identification card numbers, treatment diagnosis information, Social Security numbers, routing numbers, bank account numbers, credit card/debit card information, health insurance information, Medicare numbers, usernames and passwords, and financial information. Upon completing its investigation, CAIRE began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from CAIRE, Inc., it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the CAIRE data breach. For more information, please see our recent piece on the topic here.

What Caused the CAIRE Data Breach?

The CAIRE data breach was only recently announced, and more information is expected in the near future. However, CAIRE’s filing with the Attorney General of Vermont provides some important information on what led up to the breach. CAIRE also posted a website notice discussing the incident.

According to these sources, on February 11, 2023, CAIRE detected unusual activity within its computer network. In response, CAIRE secured its systems, notified law enforcement and then launched an investigation to learn more about the incident.

The CAIRE investigation revealed that certain files and folders were potentially accessed or taken by an unknown party. It was later confirmed that some of these files and folders contained confidential consumer information.

After learning that sensitive consumer data was accessible to an unauthorized party, CAIRE reviewed the compromised files to determine what information was leaked and which consumers were impacted. CAIRE completed this process on July 21, 2023. While the breached information varies depending on the individual, it may include your name, passport number, driver’s license number, state identification card number, treatment diagnosis information, Social Security number, routing number, bank account number, credit card/debit card information, health insurance information, Medicare number, usernames and passwords, and financial information.

On March 5, 2024, CAIRE sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About CAIRE, Inc.

CAIRE, Inc. is a manufacturing company based out of Ball Ground, Georgia. CAIRE manufactures oxygen supply equipment, such as mini-pack O2 generators, O2 cylinder refilling systems, packaged O2 systems, self-contained O2 generators, and standard O2 generators. The company also manufactures nitrogen products for the food & beverage, mining, oil & gas, and pharmaceutical industries. CAIRE employs more than 534 people and generates approximately $96 million in annual revenue.