FLOE International data breach

What we know

FLOE International is a prominent designer and manufacturer in the aluminum dock, boat lift, and trailer industry, serving a nationwide customer and dealer network. Because of the nature of its manufacturing, distribution, and commercial operations, FLOE International collects and maintains a substantial volume of sensitive personal and corporate data. This includes detailed records concerning its employees, independent dealers, commercial partners, and retail customers who purchase its recreational equipment directly or through authorized channels. The company routinely gathers high-value information necessary to process commercial transactions, manage a robust supply chain, and administer comprehensive human resources and payroll operations for its workforce. In 2025, FLOE International reported a significant data security incident to the Massachusetts Attorney General, signaling a major breach of its digital network infrastructure. While exact technical forensics vary by incident, breaches affecting manufacturing and distribution enterprises typically involve sophisticated ransomware attacks, unauthorized infiltration of enterprise resource planning (ERP) databases, or vulnerabilities within third-party vendor management systems. These threat vectors allow unauthorized actors to bypass perimeter defenses, dwell undetected within internal networks for extended periods, and exfiltrate vast repositories of confidential corporate and personal files before deploying encryption or demanding extortion. The fallout from the FLOE International breach exposes victims to severe, multi-faceted risks depending on whether their data originated from employee records or customer transactions. Compromised information frequently includes Full Names, Social Security Numbers, Dates of Birth, banking and direct deposit details, home addresses, and credit card or purchasing history. When Social Security Numbers and financial account details are leaked, victims face an immediate and persistent threat of identity theft, unauthorized credit lines being opened in their names, tax refund fraud, and direct financial account takeover. Furthermore, exposed contact and purchase histories leave individuals vulnerable to targeted phishing schemes and sophisticated social engineering attacks designed to extract further sensitive information. As an organization handling sensitive consumer and employee data, FLOE International was bound by rigorous legal obligations under state data protection statutes, including the Massachusetts Data Privacy Law, as well as implied common law duties of care. These legal frameworks mandate that companies implement robust administrative, physical, and technical safeguards—such as multi-factor authentication, network segmentation, robust encryption protocols, and regular security audits—to protect stored personal information from unauthorized access. The occurrence of a data breach of this magnitude strongly suggests potential failures or deficiencies in FLOE International's cybersecurity posture, raising serious questions about whether the company met its legal responsibilities to secure sensitive consumer and employee data. If you received a data breach notification letter from FLOE International, it serves as formal legal acknowledgment that your private information was compromised due to the company's security failure. Legally, the receipt of this letter establishes your standing to participate in a class action lawsuit aimed at holding FLOE International accountable for failing to protect your data. You do not need to prove that you have already suffered actual financial loss or identity theft to join this legal action; the increased risk of future harm is sufficient under the law. Our firm is investigating this breach on a contingency fee basis, meaning there are never any out-of-pocket costs or attorney fees unless we successfully recover compensation on your behalf.

See every breach reported in Massachusetts or read what to do after a ransomware attack.