Merrill Steel Data Breach Affects 4,118 Individuals

Merrill Steel, a structural steel fabrication company headquartered in Schofield, Wisconsin, experienced a data breach that affected 4,118 individuals in the United States.

The breach was disclosed to the Indiana Attorney General on Oct. 27, 2026.

The incident came to public attention on Oct. 7, 2026. On that date, a ransomware group calling itself Payouts King posted a claim on the dark web through the Tor network.

In its dark web posting, the Payouts King group stated that it had obtained 1.6 terabytes of data from the organization and intended to publish the stolen information within six to seven days.

The specific types of personal information exposed in the breach were not detailed in the publicly available regulatory filings but may have included personal information such as names, phone numbers, addresses, email addresses, Social Security numbers, or other information.

Merrill Steel's response to the breach

Individuals who believe they may have been affected should watch for direct communications from Merrill Steel. Any notification letter from the company may contain important details about the specific types of data that were involved and any protective resources being offered.

Individuals should consider taking protective action to protect against fraud.