On February 17, 2023, Rockler Companies, Inc. filed a notice of data breach with the Attorney General Offices in Maine and Massachusetts following a data security incident resulting in the personal information of 8,604 consumers being leaked. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, Social Security numbers, driver’s license numbers, financial account numbers and credit or debit card numbers. After confirming that consumer data was leaked, Rockler began sending out data breach notification letters to all individuals who were impacted by the recent data security incident.

If you were an employee or customer of Rockler, you inherently trusted the company to safeguard your information. However, in the wake of the recent Rockler data breach, you may be questioning whether your faith in the company was misplaced. As we’ve discussed in prior posts, companies are the first and last line of defense against cyberattacks. And, when a company’s data security systems fall short and hackers exploit this weakness, the company may be liable to anyone whose information was leaked through a data breach lawsuit.

What We Know So Far About the Rockler Companies Breach

The available information regarding the Rockler Companies breach comes from the company’s filings with the Maine Attorney General and Massachusetts Attorney General. According to these sources, on May 13, 2022, Rockler discovered suspicious activity within its computer system. In response, Rockler cut off hackers’ access to its system and then began working with outside cybersecurity specialists to investigate the incident.

The Rockler investigation confirmed that an unauthorized party was able to access portions of the company’s network between May 13, 2022 and May 16, 2022. A few days later, on May 18, 2022, the company determined that some of the files that were accessible to the unauthorized party contained confidential consumer information.

Upon discovering that sensitive consumer data was made available to an unauthorized party, Rockler Companies began to review the affected files to determine what information was compromised and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, Social Security number, driver’s license number, financial account number and credit or debit card number.

On February 17, 2023, Rockler Companies sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.

More Information About Rockler Companies, Inc.

Founded in 1954, Rockler Companies, Inc. is a hardware and woodworking-supply business based in Burnsville, Minnesota. The company designs and manufactures its own products, including jigs, hinges, shelving and clamps, and also sells products from other manufacturers. Rockler operates an online store as well as dozens of brick-and-mortar locations across the country. Rockler Companies employs more than 507 people and generates approximately $126 million in annual revenue.