Michigan Sugar Company Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Michigan Sugar Company data breach.

If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.

About Michigan Sugar Company

Michigan Sugar Company is a grower-owned agricultural cooperative based in Bay City, Michigan. Founded in 1906, the company emerged from the merger of six smaller sugar companies and has since become a major player in the food production industry, specifically focusing on beet sugar processing.

The cooperative operates four processing plants in Bay City, Caro, Croswell and Sebewaing, Michigan with about 1,000 year-round employees and up to 1,500 seasonal workers.

What Happened?

On Aug. 14, 2025, Michigan Sugar Company became aware of suspicious activity in its computer network. The company launched an investigation with the help of third-party cybersecurity specialists. It was determined that an unauthorized third party gained access to certain systems on that date, resulting in the potential acquisition of sensitive data.

The incident was linked to a ransomware attack by the group known as Akira, who claimed to have leaked 40 GB of data, including financial, employee and customer information. The breach was publicly posted on the dark web on Sept. 5, 2025.

By Dec. 17, 2025, Michigan Sugar Company confirmed that files containing personal information may have been accessed. Written notice of the incident was sent to affected individuals on Jan. 30, 2026.

The breach was also reported to the Maine Attorney General. In total, 16,689 people in the United States were affected, including two residents in Maine.

The company reported that the following types of information were exposed:

Information Exposed:

• Names
• Social Security numbers

Your Rights and Next Steps

If you received a notice from Michigan Sugar Company or believe your information may have been compromised, it is important to take action. The company is offering affected individuals one year of complimentary credit monitoring and identity restoration services through IDX. Enrolling in these services can help detect and respond to potential misuse of your information.

Here are steps you can take right now:

• Review all account statements and monitor your credit reports for any suspicious activity
• Place a fraud alert or credit freeze on your credit file to prevent unauthorized credit activity
• Take advantage of the free credit monitoring services offered by Michigan Sugar Company
• Report any incidents of identity theft to law enforcement, the Federal Trade Commission or your state Attorney General

Lawyers are ready to help those affected by the Michigan Sugar Company data breach. If your information was exposed, you may have legal rights and options, including the possibility of joining a class action lawsuit.

You May Be Entitled to Compensation

If your personal information was compromised in the Michigan Sugar Company data breach, you may be entitled to compensation. Lawyers are investigating claims on behalf of affected individuals and can help guide you through the process of protecting your rights.

To find out if you qualify and to join the lawsuit, complete the below form.

Sources

• Maine Attorney General
• Dark Web