Tungsten Automation Corporation (f/k/a Kofax, Inc.) Data Breach — Class Action Review

Tungsten Automation Corporation, formerly known as Kofax, Inc., operates as a prominent enterprise software and intelligent automation solutions provider. The company specializes in digital workflow transformation, robotic process automation (RPA), cognitive capture, and advanced document processing for global enterprises. Because Tungsten Automation's platforms are deeply integrated into the operational infrastructure of large corporate clients, financial institutions, and government agencies, the company routinely processes, ingests, and stores massive volumes of highly sensitive enterprise and consumer data. This includes proprietary corporate documents, internal employee records, vendor databases, and personal identifying information processed on behalf of corporate partners, creating a concentrated repository of sensitive data highly attractive to cybercriminals.

In 2025, Tungsten Automation Corporation reported a significant data security incident to the Texas Attorney General, triggering legal scrutiny regarding the adequacy of its enterprise security infrastructure. While the exact vector of the breach remains under investigation, incidents involving software and automation providers typically involve sophisticated external intrusions, ransomware deployments, or the unauthorized access of cloud-based data storage environments. In the context of an enterprise technology and software provider, attackers often target the underlying infrastructure or internal corporate networks to extract deeply confidential files, intellectual property, and extensive employee or customer dossiers stored across the company's operational systems.

Preliminary indications suggest that the breach compromised a wide array of sensitive personal and corporate data categories, exposing victims to severe, long-term risks. Exposed information typically includes full names, Social Security numbers, dates of birth, home addresses, employee compensation details, and confidential internal communications or operational files. When data of this nature is exfiltrated, victims face an immediate and elevated risk of identity theft, targeted phishing schemes, financial account takeover, and fraudulent tax filings. The unauthorized exposure of Social Security numbers and birth dates is particularly dangerous because these static identifiers cannot be changed, leaving affected individuals vulnerable to persistent financial fraud for years to come.

Under Texas state law, including the Texas Identity Theft Enforcement and Protection Act, along with general common law negligence principles, technology corporations like Tungsten Automation have an affirmative legal duty to implement and maintain reasonable security procedures to safeguard sensitive personal information entrusted to their care. This obligation requires robust encryption, multi-factor authentication, regular vulnerability assessments, and strict access controls. The occurrence of a data breach of this scale strongly indicates a potential failure to satisfy these critical data protection standards, raising serious questions about whether the company neglected its duty to adequately secure its systems against known and foreseeable cyber threats.

Receiving a data breach notification letter from Tungsten Automation Corporation is an official acknowledgment that your private information was compromised due to corporate security failures. Legally, the receipt of this letter establishes the foundation and standing necessary to participate in a class action lawsuit aimed at holding the company accountable for its negligence. You do not need to show proof of actual financial loss or identity theft to join the investigation and seek legal remedies; the mere exposure of your confidential data is sufficient. Our firm evaluates these cases on a strict contingency fee basis, meaning you pay absolutely nothing out of pocket and owe no attorney fees unless we successfully recover compensation on your behalf.