Goodwin Partners LLP, a prominent legal and professional services firm, recently reported a data security incident to the Indiana Attorney General. The breach, which occurred on August 28, 2025, became public with the firm's filing on January 15, 2026. This unauthorized intrusion compromised sensitive information held by the firm.
The exposed data categories are extensive and highly sensitive. They include Full Name, Social Security Number, Date of Birth, Home Address, Tax and Financial Information, Banking and Direct Deposit Details, Confidential Legal Correspondence, and Employment and Compensation Records. This combination of exposed data carries severe risks, from synthetic identity theft and fraudulent credit applications to unauthorized account access and targeted tax fraud.
As a legal firm handling confidential client matters, Goodwin Partners LLP had a clear duty to implement robust security measures to protect this information. The occurrence of a breach capable of extracting such deep and varied records suggests that critical safeguards may have been inadequate. Under Indiana's data protection statutes and common law duties, firms like Goodwin Partners LLP are expected to maintain advanced security protocols.
If you received a data breach notification letter from Goodwin Partners LLP, it means your personal and confidential information was directly affected. This notice formally confirms that your data was compromised due to a security failure.
It's important to understand that you do not need to have already experienced financial theft or identity fraud to consider legal action. The increased risk of future harm and the loss of privacy are sufficient grounds for a claim. We offer a free, no-obligation case review to help you understand your rights and potential next steps.