Betz Industries, Inc., a Grand Rapids, Michigan company, has sent a formal notice of data breach telling people that an unauthorized party got into its computer network, copied files, and deployed ransomware. The company reported the incident to the New Hampshire Attorney General on October 26, 2026.
The list of information involved is unusually broad. Here is what Betz Industries says happened, and what it has not said.
Betz Industries’s Data Breach Investigation
According to the notice, Betz Industries investigated a cybersecurity incident in which an unauthorized third party gained access to parts of its computer network. The company says the party first got in on or about June 16, 2026 through its remote access system, and that the unauthorized activity continued until July 23, 2026. That is a window of more than five weeks.
Betz Industries states that it discovered the incident on July 23, 2026, the day the unauthorized party deployed ransomware inside the network. Its investigation determined that on that same day the party also copied and removed certain files from its systems. Taking copies of files before locking systems is a common pressure tactic, because it gives the attacker something to threaten with even if the victim can restore its systems from backups.
The company says it received a report confirming which individuals were affected and what type of data was involved for each of them on September 21, 2026. In the course of checking people’s mailing addresses, it learned on October 21, 2026 that one affected individual had moved to New Hampshire. Written notice went to that person by mail on October 23, 2026. The notice follows a preliminary email notice the company says it sent in August 2026.
The filing with the New Hampshire Attorney General reports one New Hampshire resident. It does not say how many people were affected in total, and no overall count has been published, so this page does not give one.
The data list in the notice is long. It includes names, Social Security numbers, driver’s license numbers, dates of birth, phone numbers, addresses and email addresses, bank account and routing numbers, health insurance policy numbers, medical condition or treatment information, and payment card account numbers. The company has not said that every person had every item exposed; the letter says the data accessed included these categories.
That mix is what makes this incident a serious one. Financial account details, government identifiers, and medical information in one set of files can support several kinds of fraud at once, from new account fraud and tax fraud to medical identity theft and unauthorized payments. Because the company’s letter lists bank account and routing numbers, it advises people to change passwords and security question answers on financial accounts and to tell their banks that account information may have been exposed.
In response, Betz Industries says it acted quickly to contain the incident and secure its systems with the help of a cybersecurity forensic firm. It reports updating and hardening network access, resetting credentials, strengthening the security controls on remote access, and reviewing and disabling privileged and service accounts that were no longer needed.
For affected people, the company is offering identity theft protection through IDX at no cost for 24 months. The services include credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services. The letter gives an enrollment deadline of January 23, 2027, and says credit monitoring requires the person to be over 18 with established U.S. credit.
The notice does not say whether the stolen files have been published, whether a ransom was demanded, or which group was responsible. Those open questions are part of what makes it hard for affected people to gauge their own risk, and they are the kind of questions that data breach claims often examine, including whether an organization used reasonable security to protect the information entrusted to it, and whether remote access was properly secured.
Anyone who receives this notice should read it closely, enroll in the offered protection before the deadline, and watch accounts and credit reports for unfamiliar activity. People affected by an incident like this may also have legal options. A class action can allow many affected people to bring claims together, which can be a practical route when each person’s individual losses are modest but the exposure of sensitive data is shared across a group.
When Did This Breach Occur?
According to the notice, the unauthorized party first accessed the Betz Industries network on or about June 16, 2026, and the activity continued until July 23, 2026. The company discovered the incident on July 23, 2026, when ransomware was deployed, and says files were copied and removed that day.
The company confirmed who was affected on September 21, 2026, and mailed the formal notice on October 23, 2026.
What Information Was Breached?
The notice lists names, Social Security numbers, driver’s license numbers, dates of birth, phone numbers, addresses and email addresses, bank account and routing numbers, health insurance policy numbers, medical condition or treatment information, and payment card account numbers.
Not every person necessarily had every item involved. Your own letter is the best guide to what applies to you.
What You Can Do
If you received a notice from Betz Industries, consider these steps:
- Read your notice carefully and keep it with your records.
- Enroll in the 24 months of complimentary IDX identity protection by January 23, 2027, using the instructions in your letter.
- If bank account details were involved, tell your bank, change online banking passwords and security question answers, and watch for unauthorized transfers.
- Request your free credit reports from Equifax, Experian, and TransUnion through annualcreditreport.com and look for accounts you do not recognize.
- Consider a free fraud alert or security freeze on your credit file with each of the three credit bureaus.
- Review health insurance statements for services you did not receive, in case medical information was misused.
- Report suspected identity theft to the Federal Trade Commission at IdentityTheft.gov and to your state attorney general.
File a Data Breach Lawsuit Against Betz Industries
People whose Social Security numbers, financial account details, and medical information were exposed in a ransomware incident may be able to bring claims against the organization responsible, particularly if reasonable security steps were not taken.
If you were notified that your information was involved in the Betz Industries incident, it may be worth speaking with a lawyer about your options. Keep your notice and records of any fraud, or of the time and money you spent dealing with it.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
