RelaDyne, a lubricant, fuel and fluids distributor based in Houston, Texas, notified people of a data security incident in a notice dated October 27, 2026. The files may include Social Security numbers and dates of birth.
RelaDyne’s Data Breach Investigation
RelaDyne, Inc., which operates under the RelaDyne name and lists AIP RD Buyer Corp. as its parent company, sent a notice letter dated October 27, 2026 and filed a sample with Massachusetts regulators. The letter says the company recently experienced a data security incident that may have involved limited access to personal information. Massachusetts breach records list 1 Massachusetts resident, and the company has not published a total number of people affected across all states.
The notice does not say how the intruder got in, when the activity began or how long it lasted. It says RelaDyne recently determined that the information involved may include personal details about the person receiving the letter. Because the filed copy is a template with the recipient’s name and address left as placeholders, it is not possible to tell from the filing alone how many people received it or in which states they live.
According to the letter, RelaDyne investigated with outside counsel and cybersecurity specialists and took steps to contain and remediate the incident. Those steps included resetting credentials, revoking active sessions, strengthening access and monitoring controls, and enhancing phishing-reporting procedures. Steps like revoking active sessions and resetting credentials often point to a compromised account or login, but the company has not said that is what happened here, so that remains unconfirmed.
RelaDyne is offering credit monitoring and identity protection services free of charge through Experian IdentityWorks for 24 months. The letter says people must enroll by February 26, 2027, and that an enrollment code is needed to activate the service. It also says anyone with questions can write to the company’s privacy support mailbox at PrivacySupport@RelaDyne.com. The letter is signed by the company’s General Counsel.
The combination of information named in the notice is the kind that matters most for identity theft. A Social Security number paired with a full name, date of birth, mailing address and phone number gives a criminal most of what is needed to open accounts, file false tax returns or pass identity checks. Unlike a password or a card number, a Social Security number cannot easily be replaced, so the risk can last for years and calls for steady monitoring rather than a one-time check.
Distribution and industrial companies hold large amounts of employee and customer data, including payroll, benefits and account records. Those records are valuable to criminals, and a single compromised login can expose them. State laws require companies to notify affected people and regulators once they determine that personal information was involved, and companies are generally expected to protect that data with reasonable safeguards.
Attorneys are looking into whether RelaDyne took reasonable steps to protect the personal information in its care and whether its notice met the standards that apply. The filed letter is a sample, so it does not show how many people received it, when each state’s notices were mailed, or whether the company has identified who was behind the incident. Anyone who received a letter can use it to understand what applies to them.
When Did This Breach Occur?
The notice letter is dated October 27, 2026, and says RelaDyne recently experienced the incident and recently determined what information was involved. It does not give a date for when the unauthorized access started or ended, and it does not state when the company first detected it. Those details are not publicly available at this time.
What Information Was Breached?
RelaDyne says the information involved may include first and last name, mailing address, phone number, Social Security number and date of birth. The letter says the incident may have involved limited access to this information. Not every person is necessarily affected in the same way, so your own letter is the best guide to what applies to you.
What You Can Do
If you received a notice from RelaDyne or believe you may be affected, consider these steps:
- Read the notice carefully and keep it, along with the enrollment code and instructions for the Experian IdentityWorks service.
- Enroll in the 24 months of Experian IdentityWorks monitoring before the February 26, 2027 deadline listed in the letter.
- Place a free fraud alert or a credit freeze with Equifax, Experian and TransUnion, and get your reports free at annualcreditreport.com.
- Review bank, card and insurance statements for anything you do not recognize, and consider an IRS Identity Protection PIN to guard against tax fraud.
- Be skeptical of unexpected calls, texts or emails that mention the incident, and report suspected identity theft to the Federal Trade Commission at identitytheft.gov.
File a Data Breach Lawsuit Against RelaDyne
If you received a notice from RelaDyne, or you believe your Social Security number or other personal information was involved in this incident, you may have legal options for holding the company accountable for how it protected your data.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
