Graybar Electric Company Data Breach Lawsuit: Three Suits Filed, No Notice Yet
Active Litigation
On October 1, 2026 an extortion group listed Graybar on its leak site and claimed it had taken 606 GB of data. The next day, three proposed class actions were filed against Graybar in federal court in St. Louis. As of October 16, 2026, Graybar has not publicly confirmed a Graybar Electric Company data breach, no breach notice or attorney-general filing has surfaced, and there is no settlement and no claim form.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What the Lawsuits Say Happened
Graybar is a St. Louis-based distributor of electrical, industrial, automation and connectivity products, with 350 locations across the United States and Canada. The lawsuits focus on its employees: the Sims complaint says Graybar holds personal data on thousands of them, and the named plaintiff in that case is a former employee.
The complaint alleges that on or around October 1, 2026 someone gained unauthorized access to Graybar’s IT network and took files containing personal information. It says the data may include names, Social Security numbers, driver’s license or state ID numbers, addresses and contact information. It also says the exact number of people affected is unclear.
The suits plead negligence, negligence per se, breach of implied contract, invasion of privacy, unjust enrichment, breach of fiduciary duty and a request for a declaratory judgment. They allege Graybar could have limited the damage with multi-factor authentication, encryption and monitoring for large data transfers. These are allegations; Graybar has not responded on the record.
Case details
All three cases were filed on October 2, 2026 in the U.S. District Court for the Eastern District of Missouri and assigned to Judge John M. Bodenhausen:
• Blyden v. Graybar Electric Company, Inc., No. 4:26-cv-01577
• Sims v. Graybar Electric Company Inc, No. 4:26-cv-01582
• Guay v. Graybar Electric Company, Inc., No. 4:26-cv-01587
The Sims complaint seeks a class of everyone residing in the United States whose personal information was compromised, plus damages and court-ordered security improvements. The court asked the parties whether they consent to a magistrate judge handling the case. A docket entry in Blyden dated October 12, 2026 concerns consolidating the cases; we have not been able to read its text. The Blyden docket is public on CourtListener.
Status: Three Early-Stage Suits, Breach Unconfirmed
We found no notice letter from Graybar, no breach report to any state attorney general and no SEC filing about a cybersecurity incident through October 16, 2026. Until Graybar sends notices, nobody can say officially how many people are affected or which data fields were involved.
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Who Could Be Affected
The proposed class covers anyone in the United States whose personal information was compromised. In practice the complaints are built around current and former Graybar employees, whose HR and payroll records would hold Social Security and license numbers.
Graybar also serves about 150,000 customers, mostly businesses. Whether any customer or contractor data was involved has not been confirmed by anyone with access to the files.
The practical test is a letter from Graybar. If one arrives, keep it and the envelope — it will state which of your fields were involved. You do not need to sign up anywhere to be part of a class action; if a class is certified or a settlement is reached, a court-appointed administrator notifies class members.
What a Case Like This Could Pay
When employee-data breach cases do settle, the usual structure is reimbursement of documented losses, a smaller flat payment for people who document nothing, and credit monitoring. Our data breach settlement calculator shows how those tracks typically divide a fund. Keep receipts for any fraud-related costs and a note of time you spend dealing with it.
How cases like this one end
Our copy of the federal courts’ own case database covers 118,291 other personal injury casesclosed in U.S. federal district courts between 2015 and 2026, 3.9% of them filed as class actions:
- 39.6% ended in a settlement recorded by the court. Another 14% were dismissed voluntarily, which often follows a private settlement — so the real settlement share sits between 39.6% and 53.6%.
- 5.7% were decided on a motion before any trial.
- 1 in 109 reached a trial (0.9%), after a median of 23.9 months.
- Median time from filing to the end of the case: 9 months.
- Only 802 of them (0.7%) record a money award at all; the median of those is $537,500.
These are base rates for this type of case (federal other personal injury cases) — not a prediction about this lawsuit, and not legal advice. Source: Federal Judicial Center, Integrated Database (civil), analysed by Settlement Insight. Cases heard in state courts are not included.
Graybar Breach Timeline
October 1, 2026 — Leak-Site Claim
An extortion group lists Graybar Electric Company on its leak site and claims about 606 GB of data. Monitoring sites put the attack date the same day.
October 2, 2026 — Three Class Actions Filed
Blyden (4:26-cv-01577), Sims (4:26-cv-01582) and Guay (4:26-cv-01587) are filed in the Eastern District of Missouri and assigned to Judge John M. Bodenhausen.
October 8, 2026 — Data Indexed, Still Unconfirmed
A breach-tracking site says the posted files contain 3,611,273 rows of records. Graybar has not publicly confirmed a breach.
October 12, 2026 — Consolidation on the Docket
A docket entry in Blyden concerns consolidating the related cases. Its exact content could not be verified.
As of October 16, 2026 — No Notice, No Settlement
No Graybar notice letter, attorney-general filing or SEC disclosure has surfaced. No fund, claim form or deadline exists.
Three Things to Watch For
A breach that mostly hits employees, with no official notice yet, invites a specific kind of fraud:
Fake Graybar HR or payroll emails
Employee records are the target here, so expect messages posing as Graybar HR, benefits or payroll asking you to “verify” your direct-deposit details, W-2 or login. Confirm through a phone number you already know, not one in the message.
“See if you’re in the Graybar breach” checkers
Lookup sites have indexed the posted files. A legitimate check never needs your Social Security number or a fee — a site asking for either is collecting data, not protecting it.
“Claim your Graybar settlement”
There is no settlement. Firms are recruiting clients for the lawsuits; signing a retainer is a choice about representation, not a claim filing, and nobody owes you a payment for doing it.
Graybar Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Was there a Graybar Electric Company data breach?
It has not been officially confirmed. An extortion group claimed on October 1, 2026 that it took about 606 GB of Graybar data, and monitoring sites indexed the posted files. As of October 16, 2026 we found no statement or notice from Graybar.
Has a Graybar Electric Company data breach lawsuit been filed?
Yes. Three proposed class actions were filed on October 2, 2026 in the U.S. District Court for the Eastern District of Missouri: Blyden (No. 4:26-cv-01577), Sims (No. 4:26-cv-01582) and Guay (No. 4:26-cv-01587). All are at the earliest stage.
What data was exposed?
The complaints say it may include names, Social Security numbers, driver’s license or state ID numbers, addresses and contact information. A third-party tracker counted about 3,000 Social Security numbers, about 6,400 driver’s license numbers and about 1.84 million street addresses in the posted files, plus birth dates, emails, phone numbers and vehicle VINs. None of that is confirmed by Graybar.
How many people were affected?
Unknown. No official count exists because Graybar has not filed a breach report with any state attorney general that we could find. The extortion group’s posting reportedly claimed about 461,080 records, while a tracker counted 3,611,273 rows — rows are not people, and duplicates are common. The complaints themselves say the precise number is unclear.
How do I know if I was part of a data breach?
The reliable way is a notice letter from the company, which lists the data fields involved. Graybar had not sent any that we could find as of October 16, 2026. If you work or worked at Graybar, watch your mail and your credit reports, and treat unexpected HR or payroll messages with suspicion.
Who owns Graybar Electric Company?
Its own people. Graybar’s SEC annual report says the company is 100% owned by its active and retired employees and its stock does not trade publicly. It is headquartered in St. Louis, Missouri. It is unrelated to the General Electric shareholder case covered on our General Electric lawsuit page.
What is the typical payout per person for a data breach settlement?
There is no typical figure for this case, because there is no settlement and the number of people affected is unknown. Payouts in breach settlements depend on the fund size, the class size, how many people claim and whether you have documented losses. Our data breach settlement calculator walks through that math.
What is worth doing right now?
Freeze your credit at all three bureaus — it is free and reversible, and it blocks new accounts opened with a stolen Social Security number. Check your state DMV options if your license number may be exposed. Keep any Graybar notice you receive.
About This Information
- Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated
- $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Data Breach Settlement CalculatorHow breach payouts split between documented and flat claims
- Consequences of a Data BreachWhat exposed Social Security and license numbers can be used for
- Open Class Action SettlementsSettlements taking claims right now, with deadlines
- Settlement Payout CalculatorEstimate a per-person share once a fund and claim rate are known