On May 18, 2025, MathWorks Inc., a developer of mathematical computing software, discovered a ransomware attack that resulted in unauthorized access to several of its internal networks and systems. The data breach occurred over approximately a month, from April 17 to May 18, 2025, and affected both current and former employees. The ransomware attack not only encrypted many MathWorks servers but also disrupted several customer-facing services.
The cybersecurity incident involved unauthorized access to sensitive data, including both personally identifiable information (PII) and protected health information (PHI). Compromised information included names, addresses, dates of birth, Social Security numbers, and other national identification numbers, driver’s license numbers, passport numbers, birth certificate numbers, financial account information, and medical information. MathWorks began notifying impacted individuals on Aug. 22, 2025.
The data breach was disclosed to the Massachusetts and New Hampshire Attorney Generals' offices on Aug. 22, 2025. The total number of impacted individuals has not been released, but includes 8,324 in Massachusetts and 87 in New Hampshire.
After discovering the breach, MathWorks initiated its incident response protocols and notified federal law enforcement. In addition to required state and federal disclosures, the company is offering 24 months of free identity protection services through IDX.
These services include credit monitoring, CyberScan identity protection, a $1 million insurance reimbursement policy, and fully managed identity theft recovery. Impacted current and former employees have an enrollment deadline of Nov. 22, 2025.
If you receive notification from MathWorks about this breach, you may want to:
For more information about the company, visit the MathWorks official website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.