Story perspectives

Massive Data Breach: 103,782 Affected by Ransomware Attack

9/10/2025

38 8

Summary

Story summary

On December 20, 2024, Cornwell Quality Tools identified a security incident on its network.
Unauthorized access to files occurred as early as December 12, 2024.
The Cactus ransomware group claimed responsibility, stating they accessed 4.6 terabytes of data.
Compromised data included personally identifiable information (PII) and protected health information (PHI).
The breach impacted at least 103,782 individuals, prompting Cornwell to notify them starting September 4, 2025.

1 of 1

Story summary

On December 20, 2024, Cornwell Quality Tools identified a security incident on its network.
Unauthorized access to files occurred as early as December 12, 2024.
The Cactus ransomware group claimed responsibility, stating they accessed 4.6 terabytes of data.
Compromised data included personally identifiable information (PII) and protected health information (PHI).
The breach impacted at least 103,782 individuals, prompting Cornwell to notify them starting September 4, 2025.