YKK AP America Inc., a major architectural products and building materials supplier, reported a significant data breach to the Indiana Attorney General on July 2, 2026. This incident, which occurred on December 9, 2025, involved unauthorized access to sensitive personal data, likely affecting current and former employees across the company's operations.
The compromised data types include Full Name, Social Security Number, Date of Birth, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, Mailing Address, and Phone Number. This extensive list of exposed identifiers and financial records highlights the severity of the breach and its potential impact on affected individuals.
The exposure of such detailed information places victims at a high risk for various forms of fraud and identity theft. With access to Social Security Numbers and Dates of Birth, bad actors could potentially open fraudulent credit accounts, apply for loans, or even intercept tax refunds. The compromise of Direct Deposit Account Details and Wage Information specifically could lead to payroll diversion schemes or unauthorized access to bank accounts.
As a company operating in Indiana and maintaining extensive personnel records, YKK AP America Inc. had a legal responsibility to implement robust security measures to protect this sensitive data. The occurrence of this data breach suggests that the company's network defenses or data handling practices may have been inadequate, potentially failing to meet industry standards for safeguarding personal information.
If you received a data breach notification letter from YKK AP America Inc., it serves as formal acknowledgment that your personal information was compromised due to this security incident. This notification establishes your eligibility to explore legal recourse. Our firm is actively investigating the YKK AP America Inc. data breach and offers free case reviews to help you understand your options without any upfront costs.