Cornwell Quality Tools Confirms Data Breach Affecting Over 100,000 Individuals

Ohio-based Cornwell Quality Tools has disclosed a data security incident from last year that compromised the sensitive personal information of more than 100,000 customers.

 

Cornwell Tools, a mobile tool manufacturer headquartered in Wadsworth, Ohio, operates two factories located in Van Wert and Mogadore. With a nationwide network of dealers, the company also offers a financing program called Tech Credit, allowing businesses to purchase tools through flexible payment plans.

 

In a data security incident notice submitted to the Office of the Maine Attorney General, Cornwell said that on December 20, it identified unauthorised activity within its internal network. The mobile tool manufacturer immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

It also took steps to secure the affected network and notified relevant law enforcement authorities about the incident.

 

“According to our investigation, an unknown actor gained access to our network and potentially acquired certain files on or around December 12, 2024. Following a comprehensive review of the affected files, we learned that certain individuals’ personal information may have been involved in this incident,” Cornwell said.

 

The compromised data included names, Social Security Numbers, medical information, and financial account numbers. The filing with the Maine state regulator’s office also states that Cornwell has identified 103,782 individuals affected by the incident.

 

“As soon as Cornwell discovered this incident, we took the steps described above and implemented measures to enhance security and minimise the risk of a similar incident occurring in the future. We also notified the Federal Bureau of Investigation and will cooperate with any resulting investigation,” the company added.

 

Cornwell has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and state attorney general. 

 

It has also offered one year of complimentary identity protection and credit monitoring services through IDX to all affected individuals.