On June 18, 2026, SunSource Borrower LLC (“SunSource”) filed an official data breach notice with the Texas Attorney General. Notification letters went out to people whose information was involved. Recipients of that letter can review their options here for free.
The Texas Attorney General filing confirms the breach notice — not a court case. Where no court record exists, no settlement figure or deadline is shown. Legal outcomes cannot be predicted or promised.
The official Texas AG notice for SunSource Borrower LLC (“SunSource”) identifies the following exposed data:
Each exposed category makes the claim stronger. Courts treat unauthorized disclosure of this information as actionable harm.
SunSource Borrower LLC operates within the industrial distribution, fluid power, and motion control sectors, serving as a critical supply chain partner and service provider for manufacturing, automation, and commercial engineering operations. Because of its expansive commercial footprint and integrated corporate infrastructure, SunSource routinely collects, processes, and stores vast quantities of sensitive non-public personal information. This data ecosystem encompasses not only proprietary supply chain and corporate records but also extensive employee, contractor, and human resources files, including detailed payroll histories, banking details, tax documentation, and foundational identity records necessary for corporate operations and workforce management.
In 2026, SunSource reported a significant data security incident to the Office of the Texas Attorney General, indicating that unauthorized actors may have gained access to internal systems and network repositories. While industrial distributors and supply chain entities are increasingly targeted by sophisticated cybercriminal organizations seeking to disrupt commercial operations or harvest valuable data, breaches of this nature typically involve network intrusions, compromised employee credentials, or vulnerabilities within third-party vendor platforms. Such incidents often grant malicious actors unfettered access to internal file shares where sensitive corporate and personnel archives are stored without adequate multi-factor authentication or segmentation.
The exposure resulting from the SunSource security incident potentially compromises a dangerous amalgamation of personally identifiable information (PII) and sensitive financial data. When categories such as Social Security numbers, dates of birth, home addresses, banking account details, and compensation records are leaked, victims face immediate and severe risks of financial harm, including targeted phishing campaigns, tax fraud, and sophisticated identity theft. Because financial and human resources data cannot be easily altered like a password, individuals whose information was compromised are subjected to a lifetime of heightened vulnerability, forcing them to constantly monitor their credit reports, bank statements, and tax filings to prevent fraudulent activity.
As an entity maintaining sensitive personal and financial data, SunSource Borrower LLC had rigorous legal obligations under state data privacy frameworks, common law negligence principles, and the Federal Trade Commission Act to implement and maintain reasonable cybersecurity measures. These legal duties required the company to deploy robust administrative, technical, and physical safeguards—such as end-to-end encryption, continuous network monitoring, strict access controls, and regular vulnerability assessments—to protect confidential records from unauthorized disclosure. The occurrence of a data breach of this magnitude strongly suggests a failure to uphold these standard security obligations, potentially leaving the company liable for negligence and failure to protect consumer and employee data.
Receiving an official data breach notification letter from SunSource Borrower LLC serves as formal legal acknowledgment that your private information was compromised due to corporate security failures. Legally, the receipt of this notice establishes the concrete injury and standing necessary to participate in a class action lawsuit aimed at holding the company accountable for its security lapses. Affected individuals do not need to wait until they experience actual financial loss or identity theft to take legal action; our firm investigates these matters on a contingency fee basis, meaning there are never any out-of-pocket costs or fees unless we successfully recover compensation on your behalf.
Notification Delay: Approximately 3 months elapsed between the reported date of the security incident and the company's notification to the Attorney General. Courts have found that excessive notification delays independently support legal claims.
Financial harm is not a requirement. The exposure of your personal information is itself recognized as actionable. Check the list — most letter recipients qualify under at least one item:
You received a data breach notification letter from SunSource Borrower LLC (“SunSource”)
You were a customer, patient, employee, or client of SunSource Borrower LLC (“SunSource”)
Your personal information was stored in SunSource Borrower LLC (“SunSource”)'s systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Your SunSource Borrower LLC (“SunSource”) notification letter is legal evidence. Keep both physical and digital copies somewhere safe — it establishes you were affected and anchors your claim.
Look for the credit-monitoring offer section of your SunSource Borrower LLC (“SunSource”) letter and enroll. It is free, and it creates a paper trail of any resulting fraud.
Place security freezes at all three bureaus — Equifax, Experian, TransUnion. New-account fraud dies at the freeze; you can unfreeze temporarily for legitimate applications.
Deadlines apply to breach claims. A free review of your SunSource Borrower LLC (“SunSource”) letter takes minutes, and we only get paid if you do.
Security Incident
2026-03-31
An unauthorized party accessed SunSource Borrower LLC (“SunSource”) systems that stored personal information.
Reported to Attorney General
June 18, 2026
The Texas AG received SunSource Borrower LLC (“SunSource”)'s formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
A statute-of-limitations clock is running on this type of claim.
Compensation in a case like SunSource Borrower LLC (“SunSource”)'s depends on where you live, what was exposed, and how the company responded. Common recovery categories:
States like Texas may allow statutory damages per incident regardless of actual harm — California sets $100–$750 as the benchmark.
Reimbursement for fraud charges, unauthorized transactions, or expenses you incurred as a direct result of the breach.
Compensation for hours spent monitoring accounts, disputing fraud, freezing credit, and dealing with the aftermath of the breach.
Costs of credit monitoring, identity protection services, and restoration help may all be claimed.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Texas's Identity Theft Enforcement and Protection Act (Tex. Bus. & Com. Code § 521) requires notification within 60 days and imposes civil penalties up to $500,000 for violations. Texas residents may pursue civil action for data security failures.
The companies below also filed breach notices with the Texas Attorney General. Letter recipients for any of them can pursue a review.
Mercadien PC Certified Public Accountants
Texas · Oct 2026
Arkansas Hospice Inc. dba LifeTouch Health
Texas · Oct 2026
EnTrans Holding, Inc.
Texas · Oct 2026
Blueberry Pediatrics
Texas · Oct 2026
Blueberry Pediatrics
Texas · Oct 2026
CenterPoint Energy, Inc.
Texas · Oct 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris