Data Breaches

Xerox Confirms Data Breach at US Subsidiary Following Ransomware Attack

Xerox says personal information was stolen in a cyberattack at US subsidiary Xerox Business Solutions.

Xerox vulnerabilities

Printing solutions giant Xerox over the weekend confirmed that its US-based subsidiary Xerox Business Solutions experienced a data breach.

The incident, the company says, was limited to Xerox Business Solutions US and was contained by its cybersecurity team.

While the attack did not affect Xerox’s corporate systems and had no impact on the company’s operations or data, the investigation launched into the matter determined that personal information was compromised.

“Our preliminary investigation indicates that limited personal information in the XBS environment may have been affected. As per our policy and standard operating procedure, we will notify all affected individuals as required,” Xerox said in an incident notice on its website.

To date, however, the company has not provided details on whether the incident impacts clients, employees, or partners.

Xerox shared no details on the type of cybersecurity incident its subsidiary fell victim to, but the ransomware gang known as Inc Ransom was quick to claim responsibility for the attack.

Advertisement. Scroll to continue reading.

On December 30, the group listed Xerox on its Tor-based leak site, posting screenshots of documents allegedly stolen from the company, as proof of intrusion.

Since then, however, the entry was taken down, suggesting that Xerox might have engaged in communication with the attackers, to prevent the stolen data from being published online.

SecurityWeek has emailed Xerox for additional information on the attack and will update this article as soon as a reply arrives.

Related: LoanCare Notifying 1.3 Million of Data Breach Following Cyberattack on Parent Company

Related: CBS Parent National Amusements Discloses Year-Old Data Breach

Related: Integris Health Data Breach Could Impact Millions

Related Content

Data Breaches

A leaked SquareML access key could have been used to access a database containing personal and health information.

Data Breaches

The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.

Data Breaches

The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.

Data Breaches

In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders.

Threat Intelligence

Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents.

Data Breaches

The compromised information includes names, addresses, email addresses, phone numbers, and dates of birth.

Data Breaches

Paradigm Healthcare Services detected an intrusion in October 2025, but it took nearly a year to start notifying affected individuals.

Data Breaches

Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version