Baillie Lumber Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Baillie Lumber Co., L.P. data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Baillie Lumber Co.
Baillie Lumber Co. is a major player in the hardwood lumber industry, operating out of Hamburg, New York. Founded in 1923, Baillie Lumber has grown from a regional supplier into one of North America's largest manufacturers, distributors, and exporters of hardwood lumber.
With approximately 475 employees and an estimated $130.5 million in revenue, Baillie Lumber supplies North American hardwood species, including ash, cherry, maple, oak, walnut and more.
What was the Ransomware Attack?
On Feb. 11, 2025, the company discovered suspicious activity within its network. An investigation revealed that from Feb. 6 to Feb. 12, 2025, an unauthorized actor accessed and may have copied sensitive files from Baillie Lumber's systems.
The breach was later linked to the Cactus ransomware group, which claimed to have obtained 52 GB of data, including personal and corporate information. The incident was posted on the dark web on March 12, 2025.
After a detailed review, Baillie Lumber determined on July 1, 2025, that personal information belonging to certain individuals was affected. Notices were sent to impacted individuals by U.S. mail beginning July 31, 2025.
Information Exposed:
- Name
- Social Security number
- Driver’s license number
- Medical information
- Health insurance information
The breach affected individuals in several states, including at least 595 in Texas, four in Maine, and 42 in New Hampshire.
Your Rights and Next Steps
If you received a notice from Baillie Lumber or believe your information may have been involved, there are important steps you can take:
- Baillie Lumber is offering 24 months of free credit monitoring and identity protection services through Epiq. Impacted individuals can enroll to monitor their credit, receive alerts, and access identity theft insurance.
- You have the right to place a fraud alert or security freeze on your credit file at no cost. This can help prevent unauthorized accounts from being opened in your name.
- It is important to regularly check your bank and credit card statements for suspicious activity and to review your free annual credit reports from Equifax, Experian and TransUnion.
- If you notice any signs of identity theft or fraud, report them immediately to your financial institutions, the Federal Trade Commission, and local law enforcement.
- Baillie Lumber has provided detailed instructions and resources in their notice, including contact information for the major credit bureaus and steps for enrolling in credit monitoring.
Lawyers are ready to help individuals understand their rights and explore potential compensation for damages related to this breach.
You May Be Entitled to Compensation
If your personal information was exposed in the Baillie Lumber data breach, you may be eligible to join a class action lawsuit and recover compensation for damages such as time spent monitoring accounts, out-of-pocket expenses, and the risk of identity theft.
Lawyers are investigating claims on behalf of affected individuals. To find out if you qualify and to take the next step, complete the below form to join the lawsuit investigation.