.png)
Cornwell Quality Tools Data Breach Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Cornwell Quality Tools data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Cornwell Quality Tools
Cornwell Quality Tools is an American tool manufacturer, established in 1919 by Eugene Cornwell, a blacksmith from Ohio. The company produces hand tools, air tools, cordless electric tools, diagnostic equipment and tool storage solutions, primarily serving the automotive and aviation industries.
Cornwell Quality Tools manufactures many of its hand tools in-house at facilities in Albion, Pennsylvania, and Mogadore, Ohio, using USA-sourced steel. Cornwell operates through a franchise-based distribution model, where local distributors sell tools directly to professionals, often via mobile tool trucks.
What happened?
On Dec. 20, 2024, Cornwell Quality Tools discovered suspicious activity on its computer network. An investigation revealed that a cybercriminal had gained access to its systems and may have acquired files as early as Dec. 12, 2024.
The data breach was the result of a ransomware attack by a group known as Cactus. On Feb. 3, 2025, the ransomware group claimed responsibility for the hack and posted on the dark web, stating they obtained 4.6 terabytes of company data.
According to reports, the cybersecurity incident compromised personal, protected health and financial information of 103,782 individuals. Cornwell Qualify Tools notified affected individuals by mail on Sept. 4, 2025.
Information Exposed:
- Names
- Social Security numbers
- Financial account information
- Health information
Cornwell also disclosed the data breach to multiple Attorney Generals' offices beginning on Sept. 8, 2025, including Massachusetts, Maine, Texas, Vermont and Washington. Affected individuals include 16,521 Texans, 2,236 Massachusetts residents, 3,170 Washington residents and 973 in Maine.
Your Rights and Next Steps
If you received a data breach notice from Cornwell Quality, you have important rights and options. You may be entitled to seek compensation for any harm or inconvenience caused by this cybersecurity incident.
- Credit monitoring services: Enroll in the free IDX credit monitoring and identity theft protection services, paid for by Cornwell.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
Lawyers are ready to help individuals affected by this breach understand their rights and explore legal options. If your information was exposed, you may be entitled to compensation for damages such as lost time, emotional distress, and out-of-pocket expenses related to identity theft or fraud.
You May Be Entitled to Compensation
If you were notified that your information was compromised in the Cornwell Quality Tools data breach, you may be eligible to join a class action lawsuit and seek compensation. Lawyers are investigating claims on behalf of affected individuals.
To find out if you qualify and to take the next step, complete the form below to join the lawsuit investigation.
.svg)