Berg Lilly P.C. Data Breach: What To Do Next
A data security incident at the Indiana-based law firm Berg Lilly P.C. compromised highly sensitive client information. The exposed data includes Full Name, Social Security Number, and Confidential Legal Documents, putting affected individuals at risk. If you received a notification letter, your personal and financial security may be jeopardized, and you may have legal recourse.
This breach is real, not a scam. Berg Lilly P.C. officially reported it to the Indiana Attorney General on August 28, 2026.
Reviewed by David S. Harris, Esq., data breach and class action attorney (Florida Bar No. 0112739). Free consultation: 786-306-7278
Received a Berg Lilly P.C. notification letter? Find out in minutes if you qualify for compensation.
Free case review- State
- Indiana
- Breach date
- May 20, 2026
- Reported
- August 28, 2026
What may have been exposed
- Full Name
- Social Security Number
- Date of Birth
- Financial Account Number
- Tax Return Information
- Confidential Legal Documents
- Home Address
- Phone Number
Berg Lilly P.C., a law firm operating in Indiana, formally reported a data security incident on August 28, 2026. This breach involved unauthorized access to its network infrastructure, leading to the exposure of a significant volume of highly confidential client data. Law firms like Berg Lilly P.C. are custodians of incredibly sensitive personal information due to the nature of their legal practices, making robust cybersecurity measures essential.
The compromised data categories from the Berg Lilly P.C. breach are extensive and include Full Name, Social Security Number, Date of Birth, Financial Account Number, Tax Return Information, Confidential Legal Documents, Home Address, and Phone Number. The exposure of such detailed information, particularly Social Security Numbers and financial details, creates a heightened risk for identity theft, financial fraud, and other privacy violations for those affected. Confidential Legal Documents can also expose individuals to unique risks.
For any entity holding personal information, especially a law firm entrusted with sensitive client data, there is a clear obligation to implement strong security protocols. A successful network intrusion resulting in a breach of this magnitude suggests that Berg Lilly P.C. may not have met these legal standards. This could include potential gaps in their administrative, technical, and physical safeguards designed to protect client data.
If you have received an official data breach notification letter from Berg Lilly P.C., it means your personal information was directly involved in this security incident. This notification confirms that you are an affected party and may have grounds to seek accountability. You do not need to wait until you experience financial fraud or identity theft to explore your legal options.
Our firm is actively monitoring the Berg Lilly P.C. data breach and is available to help individuals understand their rights. We offer free case reviews to those who received a notification letter. There is no out-of-pocket cost to you, as we work on a contingency fee basis, meaning we only get paid if we successfully recover compensation on your behalf.
What to do if you were affected
Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.
Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Guard against tax fraud
File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: Indiana Attorney General filing
Related data breach cases
- Bozeman School District
- Bozeman School DistrictIN
- Teamsters Local 17
- Teamsters Local 17IN
- Bank
- BankIN
- PeoplesBank
- McKenzie Creative Brands
- MEBS Global Reach
- Midvale Indemnity and American Family Connect Insurance Company
- American Motorcyclist Association
- Nishiyamato Academy
- Deer Management Co. LLC dba Bessemer Venture Partners
- World Acceptance Corporation