Almeida Law Group is investigating a data breach at Kubota North America Corporation. The breach occurred on March 16th, 2026. If you were affected, contact Almeida Law Group.
About Kubota North America Corporation
Kubota North America Corporation is the North American headquarters for Kubota Corporation, a Japanese multinational manufacturer of tractors, agricultural machinery, construction equipment, engines, turf equipment, and utility vehicles. The company is headquartered in Grapevine, Texas, and employs between 5,000 and 10,000 people across its North American operations, including a major manufacturing facility in Gainesville, Georgia. Because the breach involved HR records, the sensitive personal and financial information at issue belongs to employees rather than customers.
What Happened?
Kubota North America Corporation was listed in a California Attorney General sample breach notice reported on June 30th, 2026. According to the notice, unauthorized actors accessed certain network systems between March 16th, 2026 and April 20th, 2026. On April 30th, 2026, the company discovered that files maintained by its human resources team had been accessed during that period. After a careful review, Kubota confirmed on June 16th, 2026, that those files may have contained personal information belonging to affected individuals.
The information involved varied by employee depending on role and benefits elections, but could include names, Social Security numbers, dates of birth, taxpayer identification numbers, driver’s license or other government-issued ID numbers, financial account information used for direct deposit, payment card information for corporate cards, and, for employees enrolled in a benefits plan, enrollment and limited claims information. No ransomware group has publicly claimed responsibility for the incident, and no threat-actor attribution has been reported as of June 30th, 2026.
This is not Kubota’s first brush with a data security incident. In 2023, a third-party vendor called Iseto — a printing and mailing services provider in Japan — suffered a ransomware attack that compromised data related to Kubota Credit statements and invoices, affecting 61,424 individuals and corporations. That earlier incident was a separate, vendor-related breach unconnected to this network intrusion.
Key Facts at a Glance
- Company or Organization: Kubota North America Corporation
- Industry: Machinery Manufacturing (Agricultural, Construction, and Industrial Equipment)
- Location: Grapevine, Texas
- Incident type: Unauthorized access to network systems; HR files accessed
- Date of breach: March 16th, 2026
- Date breach discovered: April 30th, 2026
- Date of consumer notification: June 30th, 2026
- Identity theft protection offered: Free Kroll identity monitoring, including triple bureau credit monitoring, fraud consultation, and identity theft restoration
- Prior breach: Yes — 2023 ransomware attack on third-party vendor Iseto affecting Kubota Credit records (separate incident)
- Source: California Attorney General sample breach notice (https://oag.ca.gov/ecrime/databreach/reports/sb24-625723); Kubota CA Sample Notice PDF (https://oag.ca.gov/system/files/Kubota_CA%20Sample.pdf); HackerDose — Kubota Data Breach (2024) (https://hackerdose.com/security/kubota-data-breach/)
What Should You Do?
If you received a notice from Kubota North America Corporation, enroll in the free Kroll identity monitoring services as soon as possible — the activation deadline is listed in your notice, and you will need your membership number to enroll at enroll.krollmonitoring.com. Beyond that, consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to make it harder for anyone to open new accounts in your name. Monitor your financial account statements closely for unauthorized charges or activity. You are entitled to a free credit report from each bureau at AnnualCreditReport.com, which you can use to check for unfamiliar accounts or inquiries. If you detect potential identity theft, report it and get a recovery plan at IdentityTheft.gov.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
