Alpine Lumber Customers Impacted by Data Breach

Edelson Lechtzin LLP investigating claims on behalf of affected customers

Published on Feb. 23, 2026

Edelson Lechtzin LLP, a national class action law firm, is investigating data privacy claims regarding a data breach incident at Alpine Lumber Company. Alpine Lumber discovered on December 22, 2025 that certain devices on its network had been encrypted by ransomware, and that an unauthorized actor had accessed and acquired certain files containing customers' personal information during the period of December 14-22, 2025.

Why it matters

Data breaches can lead to identity theft and financial fraud, putting affected customers at serious risk. This incident highlights the importance of companies properly securing customer data and quickly notifying impacted individuals when a breach occurs.

The details

The affected files may have contained personal information such as names, addresses, Social Security numbers, dates of birth, health insurance details, financial account information, and payment card data. Alpine Lumber has begun notifying affected customers and is urging them to take steps to protect themselves against identity theft and fraud.

  • On or about December 22, 2025, Alpine Lumber discovered the data breach.
  • The unauthorized access and data acquisition occurred between December 14-22, 2025.

The players

Edelson Lechtzin LLP

A national class action law firm investigating data privacy claims on behalf of Alpine Lumber customers whose data may have been compromised.

Alpine Lumber Company

A leading supplier of building materials in Colorado and New Mexico, with 21 locations, that experienced a data breach impacting customer information.

Got photos? Submit your photos here. ›

What’s next

Edelson Lechtzin LLP is investigating a class action lawsuit to seek legal remedies for individuals whose sensitive personal data may have been compromised by the Alpine Lumber data breach.

The takeaway

This data breach highlights the ongoing need for companies to prioritize data security and quickly notify customers when their information is compromised, in order to mitigate the risks of identity theft and financial fraud.