Brebeuf Jesuit Preparatory School disclosed a data security incident to the Indiana Attorney General on January 20, 2026, triggering legally mandated notification letters. If you are one of the people who received Brebeuf Jesuit Preparatory School's letter, your data may have been exposed and you could be entitled to compensation.
The Indiana Attorney General filing confirms the breach notice — not a court case. This tracker shows settlement figures and deadlines solely where a public court record exists. Outcomes are never estimated or promised.
Per the Indiana Attorney General filing, the Brebeuf Jesuit Preparatory School incident compromised these categories of personal information:
Each exposed category makes the claim stronger. Courts treat unauthorized disclosure of this information as actionable harm.
Brebeuf Jesuit Preparatory School is a prestigious, independent Catholic college-preparatory institution located in Indianapolis, Indiana. Serving hundreds of students and employing a robust staff of educators, administrators, and support personnel, the school functions much like a self-contained community. To successfully manage its daily operations, admissions, financial aid, and employment relationships, Brebeuf Jesuit routinely collects, processes, and stores an extensive volume of highly sensitive personally identifiable information. This repository includes comprehensive records for current and prospective students, parents and legal guardians, faculty members, and alumni, making the institution a significant custodian of private data within the educational sector.
In 2026, Brebeuf Jesuit Preparatory School reported a significant data security incident to the Indiana Attorney General, raising serious concerns among the school community. While educational institutions are increasingly targeted by sophisticated cybercriminal syndicates, breaches of this nature typically involve unauthorized intrusions into internal administrative networks, compromised database servers, or the exploitation of vulnerable third-party educational software vendors. In many instances, malicious actors manage to bypass perimeter defenses to gain covert access to institutional file repositories, exposing the confidential records maintained by the school's human resources, admissions, and financial administration departments.
The data compromised in incidents involving preparatory schools like Brebeuf Jesuit frequently encompasses a dangerous array of sensitive information, including full names, dates of birth, Social Security numbers, home addresses, payroll and banking details for employees, and detailed student education records. The exposure of this information creates severe, long-term risks for victims. Social Security numbers and dates of birth can be weaponized by identity thieves to open fraudulent financial accounts, apply for unauthorized loans, or commit tax fraud in the victim's name. Furthermore, when the compromised records include family financial data and student identifiers, minors and their parents face unique vulnerabilities to juvenile identity theft, which often goes undetected for years until the victim attempts to enter the financial or higher education systems.
As an educational institution handling the sensitive data of minors, employees, and families, Brebeuf Jesuit Preparatory School is bound by strict legal duties to safeguard digital infrastructure against unauthorized access. Under state data protection statutes and federal standards such as the Family Educational Rights and Privacy Act (FERPA) where applicable to educational data handling, institutions of this scale have an affirmative obligation to implement robust administrative, technical, and physical safeguards. A successful cyberattack and subsequent data breach strongly suggest a potential failure in these security protocols, indicating that the school may have fallen short of industry standards in maintaining adequate encryption, timely patching vulnerabilities, or monitoring network traffic for suspicious activity.
Receiving a formal data breach notification letter from Brebeuf Jesuit Preparatory School serves as official confirmation that your confidential information was compromised due to institutional cybersecurity failures. Legally, the receipt of this notice establishes your standing to participate in a class action lawsuit aimed at holding the school accountable and securing compensation for the risks and burdens imposed upon you. Under established legal principles, affected individuals do not need to prove that they have already suffered out-of-pocket financial loss to seek legal relief; the increased risk of future identity theft and the necessary time and expense required to mitigate it are recognized harms. Our firm evaluates and investigates these data breach claims on a strict contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.
Notification Delay: Approximately 5 months elapsed between the reported date of the security incident and the company's notification to the Attorney General. Courts have found that excessive notification delays independently support legal claims.
You do not need to show financial loss to be eligible. Courts have treated exposure of personal data as real harm. You likely qualify if any of the statements below describe you:
You received a data breach notification letter from Brebeuf Jesuit Preparatory School
You were a customer, patient, employee, or client of Brebeuf Jesuit Preparatory School
Your personal information was stored in Brebeuf Jesuit Preparatory School's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Your Brebeuf Jesuit Preparatory School notification letter is legal evidence. Keep both physical and digital copies somewhere safe — it establishes you were affected and anchors your claim.
Your letter likely includes a monitoring activation code. Use it: free monitoring flags misuse of your data and records the harm for your case.
Place security freezes at all three bureaus — Equifax, Experian, TransUnion. New-account fraud dies at the freeze; you can unfreeze temporarily for legitimate applications.
Deadlines apply to breach claims. A free review of your Brebeuf Jesuit Preparatory School letter takes minutes, and we only get paid if you do.
Security Incident
2025-08-21
Brebeuf Jesuit Preparatory School's systems were compromised, exposing stored personal records.
Reported to Attorney General
January 20, 2026
Brebeuf Jesuit Preparatory School's disclosure was logged with the Indiana Attorney General's office.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
Legal deadlines limit how long you have to act on this breach.
Breach victims may recover several categories of loss. What applies in the Brebeuf Jesuit Preparatory School matter depends on your state, the data involved, and the company's conduct.
Per-incident statutory damages may be available even without proof of fraud; California's $100–$750 statute is the leading example.
Covers fraud charges, unauthorized account activity, and expenses traced directly to the breach.
Compensation for hours spent monitoring accounts, disputing fraud, freezing credit, and dealing with the aftermath of the breach.
Reimbursement for the cost of credit monitoring services, identity theft protection, and related identity restoration expenses.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Indiana's data breach law (IC 24-4.9) requires companies to notify affected residents and the Attorney General. Indiana residents may pursue damages under the Deceptive Consumer Sales Act for a company's failure to protect personal information.
The companies below also filed breach notices with the Indiana Attorney General. Letter recipients for any of them can pursue a review.
Zaxis Financial Services Americas LLC
Indiana · Sep 2026
Woodlawn Hospital
Indiana · Sep 2026
Wooddesign RV Interiors LLC
Indiana · Sep 2026
Woodard, Emhardt, Henry, Reeves, & Wagner LLC
Indiana · Aug 2026
Wired Communications
Indiana · Jun 2026
33156
Indiana · Mar 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris