Morgan Services Data Breach Exposes Social Security Numbers

Morgan Services Inc., a family-owned textile company headquartered in Chicago, Illinois, disclosed a data breach that may have exposed sensitive personal information. The total number of individuals affected across the United States, although at least 213 residents of Massachusetts were impacted.

On Aug. 26, 2026, a ransomware group known as AILock posted a claim on the dark web alleging it had obtained 477 gigabytes of data from Morgan Services.

Morgan Services' notification letter described the incident as a cyber security incident but did not share specific details about how the attack took place, when it began or when the company discovered it. The notification also did not confirm or deny any connection to the AILock ransomware group's claim.

The information compromsied as a result of the incident included first and last names and Social Security numbers.

The breach was reported to the Massachusetts Office of Consumer Affairs and Business Regulation on Oct. 6, 2026. The company began mailing affected consumers notification letters on Oct. 2, 2026.

Morgan Services' response to the breach

Morgan Services is offering affected individuals 24 months of complimentary single-bureau credit monitoring, credit report and credit score services through Experian.

Individuals who received a notification letter can enroll by visiting Experian's enrollment page and entering the unique code provided in their letter. Enrollment must be completed within 90 days of the date of the notification.

The company has also set up a dedicated phone line for individuals who have questions or concerns about the breach. The phone line is available from 8 a.m. to 8 p.m. Central Time. Affected individuals may also write to the company at the return mailing address printed on their notification letter.