Superior Drywall Inc., a Massachusetts-based commercial drywall contractor, has disclosed a data breach resulting from a ransomware attack that exposed sensitive personal information belonging to current and former employees and other affected individuals.
According to filings submitted to the Massachusetts Office of Consumer Affairs and Business Regulation (OCABR), the breach impacted at least 730 Massachusetts residents. The company determined that unauthorized actors accessed files stored within its network during a January 2026 ransomware attack.
The exposed information includes Social Security numbers, financial account information, driver’s license numbers, and names. Because the compromised data includes government-issued identifiers and financial information, affected individuals may face an increased risk of identity theft and financial fraud.
What Happened?
Superior Drywall discovered that unauthorized actors gained access to its computer systems between January 9 and January 12, 2026. During this period, cybercriminals infiltrated the company’s network and viewed files containing sensitive personal information.
Following the intrusion, a ransomware group known as Safepay publicly claimed responsibility for the attack. On January 24, 2026, the group allegedly posted information on the Tor network stating that it had obtained company data during the breach.
After conducting a detailed review of the affected files and documents, Superior Drywall determined on May 22, 2026, that certain personal information may have been subject to unauthorized acquisition.
The company subsequently began notifying affected individuals and regulators as required by applicable data breach notification laws.
Superior Drywall completed its review of compromised files and determined that personal information may have been exposed during the ransomware attack.
The company disclosed the incident to the Massachusetts Office of Consumer Affairs and Business Regulation and began notifying affected individuals.
What Information Was Exposed?
The information involved in the breach may include:
- Full names
- Social Security numbers
- Driver’s license numbers
- Financial account information
The exposure of Social Security numbers and financial account data presents a significant risk because criminals can use this information to commit identity theft, open fraudulent accounts, or conduct unauthorized financial transactions.
Driver’s license numbers may also be used in identity verification processes, making them particularly valuable to cybercriminals.
How Many People Were Affected?
According to regulatory disclosures, at least 730 Massachusetts residents were affected by the Superior Drywall data breach.
Additional affected individuals outside Massachusetts may also have been impacted, although the company has not publicly disclosed a nationwide total.
Safepay Ransomware Group Claims Responsibility
The attack has been linked to the Safepay ransomware group, which allegedly claimed responsibility shortly after the incident occurred.
Ransomware attacks typically involve cybercriminals gaining access to a company’s network, encrypting systems, and stealing sensitive data before demanding payment. In many cases, threat actors threaten to publish stolen information if ransom demands are not met.
The publication of stolen data on dark web forums can increase risks for affected individuals because personal information may become available to additional criminal groups.
Superior Drywall’s Response
In response to the incident, Superior Drywall launched an investigation and reviewed the affected files to determine the scope of the breach.
The company is offering affected individuals 24 months of complimentary credit monitoring and identity protection services through Experian IdentityWorks.
These services include:
- Credit monitoring
- Identity theft detection
- Fraud resolution assistance
- Identity restoration support
Affected individuals received enrollment instructions and activation codes in their notification letters.
Superior Drywall has also established a dedicated toll-free response line at 888-500-5569 to answer questions regarding the incident.
What Should Affected Individuals Do?
Anyone who receives a notification letter from Superior Drywall should consider taking the following precautions:
Monitor Credit Reports
Review credit reports regularly for unfamiliar accounts or suspicious inquiries.
Monitor Financial Accounts
Check bank accounts and financial statements for unauthorized activity.
Consider a Fraud Alert
Fraud alerts can help prevent identity thieves from opening new accounts in your name.
Consider a Credit Freeze
A credit freeze restricts access to your credit file and can provide additional protection against fraud.
Stay Alert for Phishing Attempts
Cybercriminals may use information obtained during a breach to create convincing phishing emails, phone calls, or text messages.
Why Social Security Number Breaches Are Concerning
Unlike passwords, Social Security numbers generally cannot be changed after they are exposed. As a result, victims may face ongoing risks for years following a data breach.
Criminals may use stolen Social Security numbers to:
- Open fraudulent credit accounts
- File false tax returns
- Apply for loans
- Commit employment fraud
- Access government benefits
Because of these risks, affected individuals should remain vigilant and take advantage of any identity protection services offered by the company.
Can Affected Individuals Pursue Legal Action?
Organizations that collect and maintain sensitive personal information have a responsibility to implement reasonable safeguards to protect that data.
When companies fail to adequately secure personal information and a breach occurs, affected individuals may suffer financial harm, identity theft risks, and privacy violations.
Individuals affected by the Superior Drywall data breach may wish to monitor ongoing investigations and potential legal actions arising from the incident.