ICW Group Holdings (United States) notified the California Attorney General of a data breach on 13 November 2026.
People affected
Not reportedno count given yet
Reported
13 November 2026Official notice
Time to tell
196 daysfrom 1 May 2026 · the median is 147
Found to notice
178 days (found 19 May 2026, by the company’s letter)
What was exposed
The register’s list does not say what was exposed; the notice it links to (under Sources) usually does.
How it happened
How
Phishing a single ICW employee was the victim of a sophisticated social engineering event that allowed an unknown third-party to gain unauthorized accesssource
What the letter says
Found
We became aware of the social engineering event on May 19, 2026
Began
On May 1, 2026, a single ICW employee was the victim of a sophisticated social engineering event
Exposed
The personal information contained in the electronic data that may have been accessed during the incident included: test data.
Offered
ICW is offering you a complimentary 24-month membership for credit monitoring and identity theft protection services through TransUnion.
ICW Group Holdings (United States) notified the California Attorney General of a data breach on 13 November 2026. How it happened, by the sources: phishing.
What data was exposed in the ICW Group Holdings breach?
The notices and reports so far do not say what was exposed. This page is updated when they do.
How do I know if I was affected?
Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. The letter it filed is on this page. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.
Is there a ICW Group Holdings data breach settlement?
No settlement open for claims is on record for ICW Group Holdings as of 15 November 2026. A settlement usually comes a year or more after a breach, if a court approves one. Every open settlement is listed with its deadline.
Is a letter, email or text about the ICW Group Holdings breach real or a scam?
A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to ICW Group Holdings’s own site, or check the letter here.
Privacy Unpacked