A ransomware group claims it stole internal HR, financial, and customer files from Custom Floors Unlimited, a US flooring company, but the business has not publicly confirmed the incident. The number of people affected has not been disclosed. If you have done business with this company, monitor your credit reports and watch for phishing attempts as a precaution.
| Company | Custom Floors Unlimited |
|---|---|
| Industry | Retail |
| Data Types Exposed | HR and Payroll Documents, Financial and Tax Documents, Customer Contracts, Supplier and Legal Files, IT Credentials |
| People Affected | Not Publicly Disclosed |
| Attack Method | Ransomware |
| Regulators Notified | Not Publicly Disclosed |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Custom Floors Unlimited Data Breach?
A ransomware group has posted claims online stating it breached the network of Custom Floors Unlimited, a US-based custom flooring design and installation company. The group says it accessed internal company files. However, Custom Floors Unlimited has not publicly confirmed this claim as of this writing.
According to the group’s own posting, the intrusion allegedly involved internal business records rather than a visible disruption like a website outage. Groups that use this tactic typically claim to steal data quietly before threatening to publish it unless a ransom is paid. Because the company has not issued a statement, the exact method of intrusion, along with the specific timeline of when unauthorized access to its network may have occurred, has not been publicly disclosed.
At this stage, there is no confirmation from Custom Floors Unlimited that any forensic investigation is underway. As a result, readers should treat the claim as unverified until the company or a regulator confirms it. This article will be updated if official confirmation becomes available.
Who was affected?
The ransomware group’s posting suggests the alleged stolen files could involve current and former employees, as well as business customers and suppliers. Because the claim references HR and payroll-type records, employees may be among those affected. Meanwhile, references to customer contracts suggest clients of the flooring company could also be implicated.
The exact number of individuals or records involved has not been publicly disclosed. Custom Floors Unlimited has not released any figures confirming how many people might be affected. In addition, it remains unclear whether the alleged data includes information belonging to minors or other vulnerable groups, since no official breakdown has been shared.
What Information Was Potentially Exposed?
The ransomware group’s listing claims several categories of internal business data were taken. Because this claim has not been verified by the company, it should be read as an unconfirmed allegation rather than a confirmed fact. Still, the specific categories named in the posting are listed below for transparency.
- HR and payroll documents
- Financial and tax documents
- Customer contracts and commercial transaction records
- Supplier, legal, and insurance files
- IT credentials
If these claims are accurate, the risk to affected individuals could be significant. For example, payroll and tax documents often contain Social Security numbers, bank account details, and salary information. This kind of data is valuable to criminals because it can support tax fraud, fraudulent loan applications, or direct financial theft.
Similarly, exposed IT credentials could allow further unauthorized access to company systems, which could lead to additional data theft down the line. Meanwhile, customer contract details could expose personal or business information belonging to clients. Because the claims remain unconfirmed, affected individuals should still stay alert rather than assume no risk exists.
What is the company doing?
Custom Floors Unlimited has not released a public statement addressing the ransomware group’s claims. Therefore, it is not currently known whether the company has launched a forensic investigation, hired outside cybersecurity help, or notified any affected individuals. No notification timeline has been disclosed.
Because there is no confirmed response from the company, it is also not known whether credit monitoring or identity protection services will be offered to anyone affected. If the company does issue a statement or begin notifications, this information will typically appear in breach notification filings with state regulators. Readers concerned about their exposure should watch for any official communication directly from the company.
What Should Affected Individuals Do?
Monitor Your Credit Reports Closely
Even though this breach claim remains unconfirmed, it is wise to check your credit reports regularly. You can request free reports from each of the three major credit bureaus. Doing so lets you spot unfamiliar accounts or inquiries early.
If you notice anything suspicious, report it right away. Early detection often limits the damage from identity theft. Because fraud can take months to surface, consider checking your reports periodically rather than just once.
Consider a Fraud Alert or Credit Freeze
Given the claim that financial and tax documents may have been involved, placing a fraud alert on your credit file is a reasonable precaution. A fraud alert tells lenders to take extra steps to verify your identity before approving new credit. This can slow down identity thieves trying to open accounts in your name.
For stronger protection, you could also freeze your credit entirely. A credit freeze blocks new creditors from accessing your file until you lift it. Although it adds a small extra step when you apply for credit yourself, it offers one of the most effective defenses against new-account fraud.
Stay Alert for Phishing Attempts
After any data breach claim, scammers often try to exploit the situation. For instance, they may send emails or texts pretending to be from the breached company, a bank, or a government agency. These messages often create urgency to trick you into clicking a link or sharing information.
Therefore, avoid clicking links in unexpected messages, even if they look legitimate. Instead, go directly to the official website or call a verified phone number. Because phishing attempts can continue for months after a breach claim surfaces, staying cautious long-term is important.
Update Passwords and Enable Multi-Factor Authentication
Because the ransomware group’s claim mentions IT credentials, anyone who may have interacted with Custom Floors Unlimited’s systems should consider updating related passwords. This includes using strong, unique passwords for each account rather than reusing the same one everywhere. A password manager can make this easier.
In addition, enabling multi-factor authentication adds another layer of protection. Even if a password is compromised, multi-factor authentication can prevent unauthorized logins. This extra step takes only a few minutes to set up but significantly reduces account takeover risk.
Consult a Data Breach Attorney
If you believe you were affected by this incident, speaking with a data breach attorney can help clarify your rights. Many attorneys offer free consultations to review your situation. They can explain whether you may qualify for compensation if the breach is later confirmed.
Because class action eligibility often depends on confirmed facts and documented harm, getting early legal guidance can be valuable. An attorney can also help you understand filing deadlines that may apply in your state. This ensures you do not miss an opportunity to pursue a claim later.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.