On January 16, 2026, Ingram Micro Inc. notified affected individuals of a data security incident involving unauthorized access to certain internal systems. According to the notice, Ingram Micro detected a cybersecurity incident on July 3, 2025, and promptly initiated an investigation to determine the nature and scope of the activity. The company determined that between July 2 and July 3, 2025, an unauthorized third party accessed and removed certain files from internal file repositories.
Following a detailed review of the affected data, Ingram Micro confirmed that some of the files contained personal information related to employees and job applicants. Affected individuals were subsequently notified in accordance with applicable state and federal data breach notification laws.
Ingram Micro Inc. is a global technology distributor headquartered in California, providing information technology products, supply‑chain services, and cloud‑based solutions to businesses worldwide.
Upon discovering the incident, the company took immediate action to contain and remediate the unauthorized activity, including taking certain systems offline and implementing additional security measures.
As part of its response, Ingram Micro engaged leading cybersecurity experts, notified law enforcement, and enhanced its internal security protocols. The company is also offering affected individuals two years of complimentary credit monitoring and identity protection services through Experian IdentityWorks. Ingram Micro has also established a toll‑free call center to assist individuals with questions or concerns related to the incident.
What information is involved in the Vibra Hospital of Sacramento, LLC Data Breach?
Compromised information may include:
Full Name
Contact Information
Date of Birth
Government-issued Identification Numbers (including Social Security numbers, driver’s license numbers, and passport numbers)
Employment-related information (such as work-related evaluations)
Your Personally Identifiable Information (PII) includes sensitive data that can uniquely identify you. If compromised, it may be used by criminals to commit identity theft, financial fraud, or other forms of impersonation. Protected Health Information (PHI) — a subset of PII — includes medical and insurance‑related details and is protected under federal and state privacy laws. When PHI is exposed, cybercriminals may combine it with other personal data to perpetrate more extensive fraud schemes.
Ingram Micro encourages affected individuals to take proactive steps to protect their information, including enrolling in the complimentary Experian IdentityWorks services, reviewing account statements for irregular activity, and monitoring credit reports. Individuals may also consider placing fraud alerts or security freezes with the three major credit bureaus (Experian, Equifax, and TransUnion) to limit unauthorized access to their credit files.
Affected individuals are advised to remain vigilant for incidents of fraud or identity theft and to promptly report any suspicious activity to financial institutions, credit reporting agencies, and law enforcement agencies.
California residents benefit from additional privacy protections under the California Consumer Privacy Act (CCPA), which provides enhanced rights related to personal data. California also enforces the Confidentiality of Medical Information Act (CMIA), which imposes strict safeguards for medical information.
If you received a NOTICE OF DATA BREACH letter from Ingram Micro Inc., your personal information may be at risk. Identity thieves often use exposed personal and employment‑related data to open fraudulent credit accounts, obtain government benefits, or engage in other harmful activities.
Contact the Data Breach Lawyers at Emery | Reddy, PC for a Free Case Review today.