Dykema Gossett PLLC disclosed a data security incident to the Indiana Attorney General on February 20, 2026, triggering legally mandated notification letters. If you are one of the people who received Dykema Gossett PLLC's letter, your data may have been exposed and you could be entitled to compensation.
The Indiana Attorney General filing confirms the breach notice — not a court case. Settlement amounts, claim deadlines, and opt-in/opt-out instructions appear here only when a public court record supports them. No outcome is estimated or guaranteed.
Dykema Gossett PLLC's filing with the Indiana Attorney General lists these compromised data types:
The more sensitive the data involved, the stronger the potential claim. Disclosure of these categories is legally recognized harm.
Dykema Gossett PLLC is a prominent, nationally recognized full-service law firm representing major corporate clients, financial institutions, and high-net-worth individuals across complex litigation, regulatory compliance, intellectual property, and transactional matters. Because of the nature of high-stakes legal practice, the firm routinely collects, analyzes, and stores vast quantities of highly confidential and sensitive information. This repository includes proprietary corporate strategies, intellectual property, financial records, merger and acquisition documents, and deeply personal client files, as well as extensive internal personnel records containing sensitive employee and contractor data. The custody of such high-value intelligence makes the firm an attractive and high-priority target for sophisticated cybercriminal syndicates seeking to exploit vulnerabilities for financial extortion, corporate espionage, or identity theft.
In 2026, Dykema Gossett PLLC formally reported a significant cybersecurity incident to the Indiana Attorney General, alerting affected individuals and regulatory authorities that an unauthorized third party had breached its network infrastructure. While investigations into legal industry cyberattacks typically reveal sophisticated methods such as ransomware deployment, credential harvesting, or targeted third-party vendor compromises, law firm data breaches often involve unauthorized exfiltration of vast document repositories. Attackers frequently leverage advanced persistent threats or exploit zero-day vulnerabilities in enterprise collaboration and document management systems, silently extracting gigabytes of confidential files before detection occurs.
The exposure resulting from this security incident encompasses a dangerous mixture of personal identifiers, financial data, and privileged legal documentation. Compromised data categories frequently include full legal names, dates of birth, Social Security numbers, banking and direct deposit details, tax documentation, and highly sensitive client-matter correspondence. When Social Security numbers and financial data are leaked, victims face an immediate and severe risk of identity theft, unauthorized account takeover, fraudulent loan applications, and tax refund fraud. Furthermore, the exposure of legal and corporate documentation can compromise ongoing business transactions and breach fiduciary confidentiality, creating cascading financial and reputational liabilities for both the firm and its clientele.
As a custodian of sensitive personal and corporate data, Dykema Gossett PLLC is bound by strict legal duties to implement and maintain robust, reasonable administrative, physical, and technical safeguards. Under state data protection statutes, common law negligence principles, and federal regulatory standards enforced by the Federal Trade Commission, the firm had an affirmative legal obligation to encrypt sensitive data, monitor network traffic, deploy multi-factor authentication, and ensure timely patching of known vulnerabilities. The occurrence of a successful network intrusion and subsequent data exfiltration strongly suggests a failure to meet these foundational security standards, potentially exposing the firm to legal claims alleging negligence, breach of implied contract, and failure to safeguard private information.
Receiving a data breach notification letter from Dykema Gossett PLLC serves as formal legal acknowledgment that your private information was compromised due to inadequate data security practices. Under modern class action jurisprudence, the receipt of such a notification letter establishes legal standing to pursue compensation for the time, anxiety, and out-of-pocket expenses incurred in mitigating identity theft risks, without requiring proof of immediate financial loss. Our law firm is currently investigating potential legal claims on behalf of affected individuals. We handle these data breach cases on a strict contingency fee basis, meaning you pay no out-of-pocket costs or legal fees unless we successfully recover compensation on your behalf.
Notification Delay: Approximately 4 months elapsed between the reported date of the security incident and the company's notification to the Attorney General. Courts have found that excessive notification delays independently support legal claims.
Eligibility is broader than most people expect: you do not have to prove money was stolen, only that your information was put at risk. You may qualify if any of these apply:
You received a data breach notification letter from Dykema Gossett PLLC
You were a customer, patient, employee, or client of Dykema Gossett PLLC
Your personal information was stored in Dykema Gossett PLLC's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Four moves to make now — they protect both your identity and your legal position:
Keep the Dykema Gossett PLLC letter. It is the document that proves you were part of this breach; a claim without it is weaker. Store a scanned backup.
Look for the credit-monitoring offer section of your Dykema Gossett PLLC letter and enroll. It is free, and it creates a paper trail of any resulting fraud.
Lock down your credit file at Equifax, Experian and TransUnion with a free security freeze — thieves cannot open accounts on a frozen file.
Deadlines apply to breach claims. A free review of your Dykema Gossett PLLC letter takes minutes, and we only get paid if you do.
Security Incident
2025-11-03
An unauthorized party accessed Dykema Gossett PLLC systems that stored personal information.
Reported to Attorney General
February 20, 2026
Dykema Gossett PLLC filed its official breach notice with the Indiana Attorney General.
Consumer Notification Letters Sent
Within weeks of AG filing
Notification letters are sent by mail to all individuals whose data was involved.
Legal Window — Act Now
Statute of limitations applies
A statute-of-limitations clock is running on this type of claim.
Compensation in a case like Dykema Gossett PLLC's depends on where you live, what was exposed, and how the company responded. Common recovery categories:
Statutory damages exist independent of out-of-pocket loss — California's $100–$750 range is the model other states have followed.
Covers fraud charges, unauthorized account activity, and expenses traced directly to the breach.
Compensation for hours spent monitoring accounts, disputing fraud, freezing credit, and dealing with the aftermath of the breach.
If you paid for credit monitoring or identity protection after the breach, those costs can be recovered.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Indiana's data breach law (IC 24-4.9) requires companies to notify affected residents and the Attorney General. Indiana residents may pursue damages under the Deceptive Consumer Sales Act for a company's failure to protect personal information.
The companies below also filed breach notices with the Indiana Attorney General. Letter recipients for any of them can pursue a review.
Zaxis Financial Services Americas LLC
Indiana · Sep 2026
Woodlawn Hospital
Indiana · Sep 2026
Wooddesign RV Interiors LLC
Indiana · Sep 2026
Woodard, Emhardt, Henry, Reeves, & Wagner LLC
Indiana · Aug 2026
Wired Communications
Indiana · Jun 2026
33156
Indiana · Mar 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris