The Michael Larson Co., PC, an Oregon-based professional services firm, reported a data breach to state authorities on March 18, 2026. The breach, which occurred on January 29, 2026, involved unauthorized access to their digital systems, potentially exposing a wide array of confidential client records.
The compromised data includes highly personal details such as Full Name, Social Security Number, Date of Birth, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, Financial Account Number, and Home Address. The firm handles complex legal and financial advisory services, meaning the exposed data is particularly sensitive and valuable to cybercriminals.
For individuals whose information was exposed, this breach carries serious long-term risks. The combination of personal identifiers and financial data makes victims vulnerable to sophisticated identity theft, fraudulent tax filings, unauthorized account access, and other forms of financial exploitation that can be difficult and costly to resolve.
Professional firms like The Michael Larson Co., PC are entrusted with vast amounts of sensitive data and have a legal obligation to protect it through robust security measures. A data breach of this nature suggests potential shortcomings in their administrative, physical, or technical safeguards, which could constitute a failure to adequately protect client information.
If you have received a data breach notification letter from The Michael Larson Co., PC, it indicates that your personal information was compromised. You do not need to prove immediate financial loss; the increased risk of future harm and the loss of privacy are actionable. Consider a free consultation to understand your options.