New Congoleum Data Breach: Personal Information of 4k Individuals Exposed

New Congol LLC, doing business as New Congoleum, has disclosed a data breach that affected 4,831 individuals in the United States.

On March 24, 2026, New Congoleum discovered unusual activity on its computer network, according to the company's written notification to affected individuals. The company began investigating the matter upon detecting the suspicious activity.

New Congoleum engaged independent cybersecurity experts to assist with the investigation and to determine whether any personal information was involved in the incident.

Following the investigation, the company determined that personal information may have been accessed or compromised including names and Social Security numbers.

The breach was reported to the offices of the attorneys general in Maine and Vermont on May 8, 2026. The company began sending written notifications to affected consumers on May 8, 2026.

New Congoleum's response to the breach

In response to the incident, New Congoleum is now providing free identity theft protection services to all affected individuals through IDX, a leading consumer identity protection provider.

Affected individuals can enroll in the free IDX protection services by calling 1-888-202-3807, by visiting the IDX enrollment page or by scanning the QR code included in their printed notification letter.

The deadline to enroll is Aug. 8, 2026.

New Congoleum has also set up a dedicated help line for anyone with questions about the breach or who needs assistance enrolling in the identity protection services.

Representatives can be reached at 1-888-202-3807, Monday through Friday from 9 a.m. to 9 p.m. Eastern time, excluding holidays. The help line will be available for 90 days from the date of the notification letter.

Steps to take if your information was exposed

• Place a fraud alert or security freeze on your credit file by contacting any of the three major credit reporting agencies: Equifax (1-888-378-4329), Experian (1-888-397-3742) or TransUnion (1-833-799-5355).
• Request free copies of your credit reports at AnnualCreditReport.com and review them carefully for any unfamiliar accounts, hard inquiries or other suspicious activity.
• Monitor financial account statements regularly and report any unauthorized transactions to your bank or financial institution right away.
• Consider filing your tax return early to reduce the risk of someone using a stolen Social Security number to file a fraudulent return in your name.
• Report suspected identity theft to local law enforcement, the Federal Trade Commission at 877-438-4338 or consumer.ftc.gov, or your state attorney general's office.
• Watch for phishing attempts that reference New Congoleum or this data breach by name, as scammers sometimes use real breach notifications to trick people into giving up additional personal information.