New Congoleum Data Breach 2026 Exposes Personal Information of 4,831 Individuals
New Congoleum, formally known as New Congol LLC doing business as New Congoleum, is a flooring manufacturer headquartered in Mercerville, New Jersey. The company operates within the commercial flooring industry and serves customers throughout the United States.
What Happened?
New Congoleum recently disclosed a cybersecurity incident that exposed the personal information of thousands of individuals across the United States. The company confirmed that hackers gained unauthorized access to its systems during a March 2026 cyberattack.
As data breaches continue to increase in 2026, the New Congoleum data breach raises serious concerns about corporate cybersecurity and the protection of sensitive personal data. According to publicly available breach disclosures, the incident affected approximately 4,831 individuals nationwide.
How Many People Were Affected?
The New Congoleum data breach reportedly impacted 4,831 individuals nationwide. Although the total number is smaller than some recent cyberattacks, cybersecurity experts warn that even limited breaches can create significant risks for victims whose personal data becomes exposed online.
What Information Was Exposed?
Through its forensic investigation, New Congoleum determined that the compromised data included:
- Full name
- Social security numbers
Because Social Security numbers were exposed, this breach falls into the high-risk category. Threat actors can use stolen Social Security numbers to open fraudulent credit lines, file fake tax returns, apply for government benefits, and commit long-term identity theft.
What Identity Protection Is New Congoleum Offering?
To help affected consumers protect themselves, New Congoleum is providing 12 months of complimentary identity protection services through IDX, including:
- Credit monitoring
- A $1 million identity fraud loss reimbursement policy
- Fully managed identity theft recovery services
Affected individuals can enroll by:
- Calling: 1-888-202-3807
- Visiting: the IDX enrollment page
- Scanning the QR code printed in their notification letter
Enrollment deadline: August 8, 2026
Additionally, New Congoleum has set up a dedicated help line at 1-888-202-3807, available Monday through Friday from 9 a.m. to 9 p.m. Eastern time, for 90 days from the notification date.
What Should Affected Individuals Do?
1. Monitor Financial Accounts
Victims should regularly review bank statements, credit card transactions, and online accounts for suspicious activity. Early detection can help prevent additional fraud.
2. Enroll in Credit Monitoring
New Congoleum reportedly offered affected individuals complimentary credit monitoring services through IDX for 12 months. Credit monitoring can help detect unauthorized activity connected to stolen personal information.
3. Place Fraud Alerts
Consumers may consider placing fraud alerts with major credit bureaus. Fraud alerts make it more difficult for identity thieves to open new accounts using stolen information.
4. Watch for Phishing Attempts
Cybercriminals frequently target breach victims with phishing emails and scam phone calls. Individuals should avoid clicking suspicious links or sharing personal information with unknown contacts.
Find a Data Breach Lawyer
