Southwire data breach: files taken November 2025 to January 2026, health plan notice November 12

Date	Event
November 2025 to January 2026	An unauthorized party takes files from Southwire's systems
January 29, 2026	Southwire becomes aware of unusual activity and brings in outside specialists
Late October 2026	Southwire learns what information the files held and whose it was
November 11, 2026	Vermont logs the notice (9 residents)
November 12, 2026	The employee health plan publishes a HIPAA media notice; letters are being mailed

What happened at Southwire?

Southwire says it secured its environment and engaged third-party cybersecurity specialists once it found the activity. The files were taken in the months before the activity was spotted. The notice does not say how the intruder got in or whether ransomware was involved. Southwire then reviewed the files, and that review ran until late October.

Why is a health plan giving notice for a manufacturer?

The notice is issued by Southwire's employee benefit plan, about files on systems Southwire maintains. A media notice is the HIPAA route for a large breach: the rule requires one when a breach of unsecured protected health information involves more than 500 residents of a state or jurisdiction, and sets the same 60-day outer limit as letters. The notice does not say how many people the plan is writing to, or whether they are employees, former employees or family members on the plan. Why you got a breach letter from a company you never dealt with explains how a plan or a vendor ends up holding your data.

What information was exposed?

Data element	In the notice	In Vermont's record
Name	Yes
Social Security number	Yes	Yes
Date of birth	Yes
Home address	Yes
Health plan information, including plan numbers	Yes	Health records
Medical information	Yes	Health records
Government ID numbers		Yes
Financial account codes, credit and debit account info		Yes
Login credentials		Yes

The notice says the information varied by person. Vermont's record of Southwire's notice is broader: it adds government ID numbers, financial account information and login credentials. Your own letter says which applied to you.

What is Southwire offering?

Southwire is mailing letters and offering 24 months of credit monitoring and identity protection at no cost. The notice does not name the provider; the letter carries the enrollment details. The plan says it is not aware of any misuse and recommends watching account statements and credit reports. Credit monitoring offers in breach letters compares the offers in the log.

Who do I call with questions?

The call centre is at 1-833-931-3700, toll-free, Monday through Friday, 8 am to 8 pm Central, excluding major holidays. Have engagement number B175949 ready. Other industrial notices are on the industrials and manufacturing hub, and healthcare breach notices covers what health-data letters usually contain.