Flex Data Breach

Flex, a global technology manufacturing and supply-chain company headquartered in Austin, Texas, is facing an unconfirmed data breach claim after a ransomware group posted about the company on its dark web leak site in September 2026. Companies that handle large volumes of employee and business partner information have a responsibility to safeguard that data and to notify affected individuals promptly if it is compromised.

Flex’s Data Breach Investigation

Attorneys working with consumer advocacy groups are investigating claims made by a ransomware group that it accessed data belonging to Flex. As of this writing, Flex has not issued a public data breach notification confirming the incident, and no state Attorney General filing describing the scope of any breach has been located. This kind of gap between an attacker’s public claim and a company’s own confirmation is common in the early stages of a suspected breach: threat actors frequently publicize an alleged intrusion on a leak site well before (or instead of) the affected company completing its own investigation and legal notification obligations.

Flex is a large, publicly traded manufacturer with more than 100 facilities worldwide and roughly 150,000 employees, making it an attractive target for ransomware and data-extortion groups that seek to maximize leverage by claiming access to a high volume of records. Companies of this size typically maintain extensive databases of current and former employee information, along with data belonging to business partners, vendors, and clients, any of which could be implicated if the claimed intrusion is substantiated.

Ransomware groups typically follow a double-extortion model: encrypting a victim’s internal systems while separately threatening to publish stolen data unless a ransom is paid. Even when a company has not suffered operational disruption, or has already restored affected systems, previously exfiltrated data can still be released or sold if negotiations fail. Individuals connected to a company named in this type of claim are often notified well after the initial public claim, once the company’s own forensic investigation determines what, if any, personal information was actually involved.

Until Flex confirms the scope of any incident or files a formal notification with a state regulator, the exact number of people affected, the categories of information involved, and the root cause of the alleged intrusion all remain unknown. This page will be updated as more verified information becomes available.

When Did This Breach Occur?

A ransomware group publicized its claim regarding Flex on September 21, 2026. The claim does not establish exactly when any unauthorized access may have first occurred, since dark web leak site postings often lag the actual intrusion date, sometimes by weeks or months.

What Information Was Breached?

Flex has not publicly disclosed what, if any, personal information may have been involved. Attorneys investigating the claim are asking current and former employees, clients, and business partners of Flex to come forward if they believe their information may have been affected.

What You Can Do

• Monitor your financial accounts and credit reports for unfamiliar activity.
• Consider placing a fraud alert or credit freeze with the major credit bureaus.
• Watch for phishing emails or calls referencing Flex or your employment or business relationship with the company.
• Keep any communications you receive from Flex regarding this matter.
• Reach out to a legal professional to learn about your rights if you believe you were affected.

File a Data Breach Lawsuit Against Flex

If you are a current or former employee, client, or business partner of Flex and are concerned your personal information may have been exposed in this claimed incident, you may have legal options. Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.