The Maryland Attorney General's office lists a data breach report from Decisionfi LLC, filed February 21, 2025. Companies in this situation send legally required notification letters to affected individuals — if you found Decisionfi LLC's letter in your mail, this page explains what it means and what you can do.
The Maryland Attorney General filing confirms the breach notice — not a court case. Dollar amounts and deadlines are shown only when a verifiable court filing supports them — nothing on this page estimates or guarantees a result.
Records filed with the Maryland AG show that Decisionfi LLC confirmed exposure of the information below:
The more sensitive the data involved, the stronger the potential claim. Disclosure of these categories is legally recognized harm.
Decisionfi LLC operates at the intersection of modern financial technology and data analytics, functioning as a specialized platform that provides algorithmic financial planning, algorithmic wealth management, and automated credit assessment services. Because of the core nature of its operations, Decisionfi maintains deep integrations with banking networks, credit bureaus, and consumer financial accounts, requiring the aggregation of vast repositories of highly sensitive personal and financial data. The company processes intricate financial histories, investment portfolios, and transactional records for thousands of consumers, transforming it into a high-value target for malicious cyber actors seeking to exploit institutional vulnerabilities for illicit financial gain.
In 2025, Decisionfi LLC formally reported a significant security incident to the Office of the Maryland Attorney General, alerting consumers and regulatory bodies to a compromise of its digital infrastructure. While the exact vector of the attack remains under ongoing forensic evaluation, data security incidents affecting sophisticated financial technology platforms typically involve sophisticated threat actors infiltrating perimeter defenses, exploiting unsecured application programming interfaces, or leveraging compromised administrative credentials to gain unauthorized entry into centralized consumer databases. These attacks often bypass initial detection mechanisms, allowing cybercriminals prolonged, unmonitored access to sensitive data storage environments where foundational consumer profile information resides.
The breach exposed a dangerous array of sensitive data elements, each creating distinct, severe risks for affected individuals. The unauthorized disclosure of Full Names, Social Security Numbers, and Dates of Birth provides identity thieves with the permanent building blocks necessary to open fraudulent lines of credit, secure unauthorized loans, or perpetrate complex synthetic identity theft. Furthermore, the exposure of Financial Account Numbers, routing details, and transaction history directly threatens victims' immediate economic security, paving the way for direct account takeovers, unauthorized wire transfers, and draining of personal savings. Unlike transient data points, immutable identifiers like Social Security numbers cannot be reset, leaving victims vulnerable to persistent, long-term risks of tax fraud and ongoing financial monitoring burdens.
As a financial technology service provider handling sensitive consumer financial records, Decisionfi LLC was bound by stringent legal obligations to maintain robust, multi-layered cybersecurity safeguards. Under the Gramm-Leach-Bliley Act (GLBA), federal regulations, and applicable Maryland state data protection statutes, the company had an affirmative legal duty to protect consumer non-public personal information through comprehensive administrative, technical, and physical safeguards. The occurrence of a data breach of this magnitude strongly indicates a systemic failure of these required security protocols, potentially reflecting inadequate encryption standards, delayed vulnerability patching, or insufficient access controls designed to prevent unauthorized exfiltration.
Receiving a formal data breach notification letter from Decisionfi LLC serves as legal confirmation that your confidential financial and personal records were compromised due to the company's security failures. Under established consumer privacy law, the receipt of this letter establishes legal standing to participate in a class action lawsuit aimed at holding Decisionfi accountable for failing to safeguard your sensitive information. Prospective class members should understand that pursuing legal action does not require proof of actualized financial loss or identity theft; the increased risk of future harm and the time and expense required for mitigation are themselves actionable injuries. Our firm handles these complex data privacy cases on a strict contingency fee basis, meaning you pay absolutely nothing out of pocket, and we only recover fees if we successfully secure a recovery on your behalf.
Many people wrongly assume a claim requires proven fraud. The law recognizes data exposure alone as harm. See which of these describes your situation:
You received a data breach notification letter from Decisionfi LLC
You were a customer, patient, employee, or client of Decisionfi LLC
Your personal information was stored in Decisionfi LLC's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Act quickly to protect your identity and preserve your claim. Four steps, in order:
Keep the Decisionfi LLC letter. It is the document that proves you were part of this breach; a claim without it is weaker. Store a scanned backup.
Your letter likely includes a monitoring activation code. Use it: free monitoring flags misuse of your data and records the harm for your case.
Place security freezes at all three bureaus — Equifax, Experian, TransUnion. New-account fraud dies at the freeze; you can unfreeze temporarily for legitimate applications.
Time limits can forfeit your claim. Have attorneys review your Decisionfi LLC case at no cost — contingency means zero upfront fees.
Security Incident
Prior to AG notification
An unauthorized party accessed Decisionfi LLC systems that stored personal information.
Reported to Attorney General
February 21, 2025
Decisionfi LLC filed its official breach notice with the Maryland Attorney General.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
A statute-of-limitations clock is running on this type of claim.
Breach victims may recover several categories of loss. What applies in the Decisionfi LLC matter depends on your state, the data involved, and the company's conduct.
Statutory damages exist independent of out-of-pocket loss — California's $100–$750 range is the model other states have followed.
Covers fraud charges, unauthorized account activity, and expenses traced directly to the breach.
Compensation for hours spent monitoring accounts, disputing fraud, freezing credit, and dealing with the aftermath of the breach.
Outlays for monitoring services and identity-restoration help belong in your claim.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Maryland's Personal Information Protection Act (PIPA) requires companies to implement reasonable security measures. Violations can support statutory damages claims even without proof of financial harm.
These organizations also reported breaches to the Maryland Attorney General. If their letters reached you too, each may carry its own claim.
Lyon Management Group, Inc.
Maryland · Jan 2025
Cabrillo College
Maryland · Feb 2025
Christopher L. Mewborn, Attorney, P.A. d/b/a Mewborn & DeSelms, Attorneys at Law
Maryland · Feb 2025
Ott Cone & Redpath, P.A.
Maryland · Jan 2025
ChurchShield
Maryland · Jan 2025
lannuzzi Manetta & Company P.C.; lannuzzi & Darling
Maryland · Jan 2025
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris