A ransomware group says it stole customer and employee records from Conecuh Sausage, the family-owned Alabama sausage maker in business since 1947. On November 10, 2026, the group posted the claim on its leak site, saying it took customer, payment, and personnel records.
If Conecuh sends you a notice, offer, release, or other agreement, consider talking with an Alabama data breach lawyer before you sign. Some documents can include terms that affect your legal rights.
Key Takeaways
- Interlock claimed the Conecuh Sausage data breach on its leak site on November 10, 2026.
- As of November 11, 2026, we found no public statement from Conecuh confirming the attack and no notice letters.
- The attackers claim the stolen data includes customer and payment details, personnel records, supplier contracts, and recipes.
- This guide is for anyone who bought directly from Conecuh, online or at its gift shop, or worked there in the last five years.
- A credit freeze is free and can make it harder for thieves to open new accounts in your name.
- Anyone with a Social Security number or ITIN who can verify their identity can request an IRS Identity Protection PIN.
What Happened in the Conecuh Sausage Data Breach?
Who is Conecuh Sausage?
Conecuh Sausage Company Inc. makes its sausage at 181 E Progress Drive in Andalusia, in Covington County. It sells directly to customers online at conecuhsausage.com and through its retail gift shop off I-65 at Exit 96 in Evergreen.
What did the hackers say they took?
On November 10, 2026, the Interlock ransomware group posted Conecuh on its leak site. A leak site is where hackers threaten to publish stolen files. Interlock says it took:
- Customer data
- Payment information
- Personnel (employee) records
- Supplier contracts
- Projects
- Recipes and other company secrets
These are the attackers' claims. They have not been independently verified.
Where do things stand right now?
As of November 11, 2026, we found no public statement from Conecuh confirming the attack and no notice letters.
Who is behind the attack?
A joint advisory from the FBI, CISA, and other agencies says Interlock was first seen in late September 2024 and uses double extortion. It copies a company's files first, then locks its systems, which adds pressure to pay both to unlock systems and to keep the data from being leaked.
Could Your Information Be Involved?
Did you buy directly from Conecuh?
If you ordered online or paid at the gift shop, your name, address, and card details may be among the data the attackers say they took. If card numbers were taken, they could be used for fraudulent charges.
Did you work for Conecuh?
Current and former employees, including those who have worked at Conecuh's production facilities in Evergreen or Andalusia or at its Evergreen gift shop, may be affected if personnel records were taken. Personnel files can include Social Security numbers, birth dates, and direct-deposit bank details. Thieves can use this kind of information to open credit or file fake tax returns.
What if you only bought it at the grocery store?
If you bought Conecuh products only at a grocery or retail store, you paid that store, not Conecuh, so your card details would not pass through Conecuh's systems. Only information you shared directly with Conecuh would be involved.
How big is the risk of fraud?
In testimony to Congress in March 2026, the Federal Trade Commission reported 3 million fraud reports in 2025, with $15.9 billion in reported losses, up from 2.6 million reports and just over $12 billion in losses in 2024.
What Should You Do Right Now?
Consider a credit freeze
The FTC's guide to credit freezes and fraud alerts explains that a freeze is free and makes it harder for thieves to open accounts in your name. To place one, contact Equifax, Experian, and TransUnion separately. The FTC guide also explains fraud alerts, which work differently.
Ask your bank about a new card
If you paid Conecuh online or in its store, you can ask your bank about a new card number and watch your statements.
Check your credit reports
You can get free reports from Equifax, Experian, and TransUnion every week at AnnualCreditReport.com. Look for accounts, loans, or addresses you do not recognize.
Protect your tax return
Anyone with a Social Security number or ITIN who can verify their identity can request a six-digit IRS Identity Protection PIN. It prevents someone else from filing a federal tax return using your Social Security number. Check the IRS page for current enrollment options.
Keep a paper trail
Save order emails, receipts, pay stubs, bank statements that show fraud, and proof of anything you pay to protect yourself. Our guide to protecting your rights after a data breach explains why these records matter.
Be careful with surprise calls
Scammers can pose as a breached company, so be cautious about sharing personal details with anyone who calls about this breach.
What Are Your Legal Rights in Alabama?
What does Alabama's notice law do for you?
The Alabama Data Breach Notification Act of 2018 (Ala. Code § 8-38-1 et seq.) generally requires a business to notify affected Alabama residents within 45 days after it determines that a breach of sensitive personal information is reasonably likely to cause substantial harm. If more than 1,000 Alabama residents must be notified, the business must also notify the Alabama Attorney General. The Attorney General enforces the law, and it does not, by itself, give you the right to sue. If you live outside Alabama, your own state's notice law may apply instead.
Could you have a negligence claim?
A claim would usually be for negligence, meaning the company failed to use reasonable care with information it chose to collect. Whether Conecuh used reasonable security has not been established. Learn more about the role of negligence in data breach lawsuits.
Should you join a class action or file your own claim?
Breach claims may move forward as a class action, where one lawsuit covers many people harmed the same way. If someone's losses are much larger than most, an individual claim may fit better.
What losses can you recover?
Special damages are actual, provable money losses. In a breach case, they can include:
- Fraudulent charges or withdrawals your bank did not refund
- Fees for credit monitoring, credit reports, or replacing ID documents
- Overdraft, late, or card replacement fees caused by the fraud
- Wages lost when you take unpaid time off to fix fraud
- Tax refunds delayed or stolen through a fake return
When are punitive damages possible?
Punitive damages are extra money meant to punish a company, not repay a loss. In Alabama, they are allowed only as authorized by Ala. Code § 6-11-20. That statute requires clear and convincing evidence, a higher standard than in most civil claims, that the company consciously or deliberately engaged in oppression, fraud, wantonness (reckless or conscious disregard of the rights or safety of others), or malice with regard to the person suing. Carelessness alone is not enough.
Questions People Are Asking About the Breach
I never got a letter. Could I still be affected?
Yes. Alabama law generally gives a business up to 45 days to send notice after it determines a breach is likely to cause substantial harm, and the investigation can take time before that.
Does this apply to former employees?
It may. Companies may keep former workers' records after they leave, so former employees may want to watch their credit and tax accounts.
Should I accept free credit monitoring if Conecuh offers it?
Monitoring can help. Before you sign up, read any paperwork that comes with it, and consider asking a lawyer whether it includes terms that affect your rights.
Is there a deadline to act?
Yes. Many negligence claims governed by Alabama law must be filed within two years under Ala. Code § 6-2-38(l). When that clock starts, and which deadline applies, depends on the facts and on which state's law governs, so it is worth asking early.
What should I have ready when I call?
Anything that shows your link to Conecuh, such as order emails, receipts, or pay stubs, plus any bank statements or IRS letters showing fraud. If you have none yet, you can still call.
What does it cost to talk to a lawyer?
Nothing. Our case review is free.
Talk to an Attorney Before You Sign Anything
If you bought directly from Conecuh Sausage Company, online or in its store, or worked there in the last five years, you can reach Cory Watson Attorneys at 877-562-0000 or through our online contact form for a free, confidential review.
Who's behind this guide? Cory Watson Attorneys has represented injury victims and their families for more than 44 years and has recovered more than $4 billion for clients. Past results do not guarantee a similar outcome.