Norwex USA Data Breach Exposes Personally Identifiable Info

Norwex USA, Inc. recently disclosed a data breach that exposed sensitive personal information.

The breach was reported to various state attorney general offices: California, Massachusetts, Rhode Island, South Carolina, and Texas.

The exact total number of individuals impacted nationwide has not been disclosed but included at least 1,000 people in South Carolina.

The compromised information includes highly sensitive personal and financial data, such as:

• Names
• Social Security numbers
• Driver's license numbers
• Payroll information (including salaries, performance reviews, and claims)
• Tax form information
• Dates of birth
• Mailing addresses
• Financial account information
• Payment card information
• Medical information
• Health insurance information

The breach was reportedly caused by a security incident that resulted in unauthorized access to Norwex’s systems.

The company has not disclosed specific details about how the breach occurred or who was responsible, but the exposure of such a wide range of sensitive data highlights the severity of the incident.

Norwex's response

Norwex partnered with Identity Defense to offer affected individuals two years of free identity monitoring services. These services include identity protection support and assistance with resolving identity theft issues.

Affected individuals have until March 25, 2025, to enroll in these services.