AEC Holdco LLC, also known as Grace Design Studios LLC, recently confirmed a data breach affecting individuals whose personal information was stored on its systems. The Indiana-based company reported the incident on April 30, 2026, after discovering unauthorized access to its network. The breach date was identified as March 5, 2026.
The compromised data categories include Full Name, Social Security Number, Date of Birth, Home Address, Direct Deposit Account Details, Tax and Payroll Information, Email Address, and Phone Number. The exposure of such a wide range of sensitive information significantly increases the risk for affected individuals. Bad actors could use Social Security Numbers and Dates of Birth to open fraudulent accounts, while Direct Deposit Account Details and Tax and Payroll Information could lead to direct financial theft.
Companies like Grace Design Studios LLC have a legal obligation to protect the sensitive personal data they collect and store. This duty includes implementing robust security measures in line with state regulations, such as the Indiana Disclosure of Security Breach Law, and general duties of care. A data breach suggests that these security protocols may have been insufficient to prevent unauthorized access.
If you received an official data breach notification letter from AEC Holdco LLC dba Grace Design Studios LLC, it means your confidential information was part of this compromise. You do not necessarily need to have already experienced identity theft or financial fraud to explore your rights.
Individuals impacted by this breach may have the opportunity to participate in a class action lawsuit aimed at holding the company accountable for its data security practices. Such legal actions can seek compensation for damages incurred due to the breach, including time spent monitoring accounts, costs associated with identity theft, and other losses. Investigating your options with an attorney can help you understand if you qualify.