Trellix Cyberattack Exposes User Data in Indiana Filing

Musarubra US LLC, known by its brand name Trellix, filed a report with Indiana regulators concerning a data security incident. This filing, submitted on August 28, 2026, details a breach that was identified as occurring on February 28, 2026.

The compromised information includes individuals' Full Name, Email Address, Password or Credential Hash, Mailing Address, Phone Number, Employment and Professional Title, Corporate Account History, and Internal System Access Logs. These details are derived from the official public report.

Exposure of such information can create risks for affected individuals. Full names, email addresses, and phone numbers may be used in targeted phishing campaigns or other unsolicited communications. If compromised credential hashes are linked to accounts, there is a risk of unauthorized access, particularly if individuals reuse passwords across different services.

Individuals who receive a breach notification related to this incident should remain vigilant. It is generally recommended to change passwords for any accounts that might be associated with the exposed email address, especially if those passwords are reused. Additionally, monitoring accounts for unusual activity and being cautious of unexpected emails or calls claiming to be from Trellix or other institutions is a good practice.

This incident underscores the continuous challenge of maintaining digital security, even for companies specializing in cybersecurity solutions. All facts presented are based on public disclosures made to regulatory bodies.