Cornwell Quality Tools says it discovered unusual activity on its computer network on December 20, 2024, and immediately brought in outside cybersecurity experts to investigate and secure its systems. That investigation found that an unknown actor had gained access to the network and potentially acquired certain files around December 12, 2024. This falls under hacking or system intrusion, and after reviewing the affected files, Cornwell determined that some individuals’ personal information may have been included among the accessed data. The company also notified the FBI and says it is cooperating with any resulting investigation.
The letter is addressed to individuals whose information Cornwell identified as potentially involved in this incident. Notably, the version of the letter provided uses a placeholder for the specific category of personal information tied to each recipient, so it does not spell out for every person exactly which data element beyond their name was affected. Cornwell also does not state a total number of people notified in this letter.
What information was exposed?
- Your name
- An additional personal data element specific to your record, which the letter references but does not spell out in this copy — check the specific wording in your own letter for the exact detail
Cornwell is offering affected individuals complimentary credit monitoring and identity theft protection through IDX, which includes credit monitoring, dark web monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services. You can enroll at https://response.idx.us/cornwell using the enrollment code included in your individual letter, and the deadline to sign up is December 4, 2025.
What should you do now?
- Enroll in the free IDX credit monitoring and identity theft protection services before the December 4, 2025 deadline, since this covers dark web monitoring and identity recovery assistance at no cost to you.
- Review your bank and credit card statements closely for any charges or accounts you don’t recognize, and report anything suspicious to the financial institution right away.
- Request your free credit reports from Equifax, Experian, and TransUnion at annualcreditreport.com and look for any unfamiliar accounts or inquiries.
- Consider placing a fraud alert or a security freeze on your credit file with each of the three credit bureaus — both are free and make it harder for someone to open new accounts in your name.
- Because the specific data involved isn’t fully detailed for every recipient in this letter, it’s worth signing up for a service like Aura or LifeLock, which can alert you if your personal information turns up somewhere it shouldn’t.
- Report any confirmed identity theft or fraud to your local police, your state attorney general, and the Federal Trade Commission at consumer.ftc.gov.
If you have questions, Cornwell Quality Tools can be reached through IDX at 1-833-353-4106, Monday through Friday from 9:00 am to 9:00 pm Eastern Time, or by mail at 667 Seville Road, Wadsworth, OH 44281.