Meyer Corporation, a global cookware distributor giant headquartered in the United States, recently disclosed a data breach affecting its employees. Meyer sent out a notification letter early last week to potentially impacted employees and detailed that the data breach is following a cyberattack that occurred in late October of 2021. Meyer conducted an investigation in early December that revealed “potential unauthorized access” to sensitive, personal information of Meyer employees and its subsidiaries’ employees (including Hestan Commercial Corporation, Hestan Smart Cooking, Hestan Vineyards, and Blue Mountain Enterprises, LLC). This information includes the following data types: full names, physical address, date of birth, gender, ethnicity, driver’s license, passports, government identification number, Social Security number, immigration status information, dependent information, permanent resident cards, health insurance data, medical condition, drug screening results, and COVID-19 vaccination cards. Meyer’s notification letter did not reveal the threat group responsible for the October 2021 cyberattack, but the Conti ransomware group did publish a posting on their leak site in early November 2021 about Meyer Corporation. The posting only contains 2% of the allegedly exfiltrated data in a ZIP file and, since November, there have been no updates providing the additional 98% of data. CTIX analysts are continuing to monitor Conti’s leak site for Meyer Corporation updates as well as additional data dumps.