A cybersecurity issue impacting Iron Mountain has placed personal data tied to its clients and employees at potential risk. Information stored on the company's systems may have been accessed by an unauthorized party operating outside the organization. A formal statement was issued by Iron Mountain through its official press channels to acknowledge the matter. If you received a data breach notification letter from Iron Mountain, our data breach lawyers want to hear from you.

What Happened?

On or around February 2, 2026, a cybersecurity issue was identified by Iron Mountain after irregular activity was observed within parts of its information systems. A full investigation was launched in coordination with cybersecurity experts to determine the scope of the incident. The specific data fields and number of records involved are still being evaluated as the inquiry continues. A public statement was issued by Iron Mountain through its press releases page to inform affected clients and employees. Recipients are being directed to a dedicated resource for additional updates and guidance. Customers and staff have been encouraged by Iron Mountain to remain alert to unusual activity involving personal accounts or correspondence.

If you are a client or employee who worked with Iron Mountain, you may be entitled to compensation. Fill out the form below to see if you qualify.

Steps To Take If You Were Affected

1. Monitor your credit reports and financial accounts for suspicious activity
2. Consider placing a fraud alert or credit freeze with all three major credit bureaus
3. Be alert to phishing emails or calls referencing the breach
4. Change passwords on any affected accounts and enable two-factor authentication
5. Keep a copy of your data breach notification letter for your records