Tekni-Plex, Inc., a global manufacturer specializing in packaging materials and medical tubing, experienced a major data breach. The incident was a ransomware attack carried out by the RansomHub group, who claimed responsibility on their dark web portal.
Dec. 13, 2024, RansomHub announced they had obtained 424 GB of Tekni-Plex’s data and threatened to publish it within 10 days, sharing sample screenshots as proof. The cyberattack compromised both personally identifiable information (PII) and protected health information (PHI) belonging to individuals in multiple states.
Exposed information included names, Social Security numbers, financial account details, medical information, and health insurance information. The data breach is considered severe and puts affected individuals at risk for identity theft and fraud.
TekniPlex began notifying affected individuals by mail on Sept. 24, 2025. The cybersecurity incident was also disclosed to multiple state authorities between Sept. 24, 2025 and Sept. 26, 2025.
For more information, individuals can review the official notices filed with the Maine Attorney General, Massachusetts Attorney General, Texas Attorney General, and Vermont Attorney General. Affected individuals includes at least 970 people in Texas and 57 in Massachusetts.
In addition to required state and federal disclosures, TekniPlex is offering affected individuals 24 months of free credit monitoring and identity theft protection through IDX. Enrollment instructions and unique codes were provided in the notification letters, and the deadline to enroll is Dec. 24, 2025.
Given that the breach was a ransomware attack, it is important for affected individuals to:
For more information about the company, visit the Tekni-Plex website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.