Indiana Data Breach Notification Letters

Indiana Disclosure of Security Breach Act (IC 24-4.9-3-1 et seq.)

Indiana requires notification within 45 days of discovering a breach and requires the AG to be notified when a breach affects more than 500 Indiana residents. The AG has authority to bring enforcement actions and seek penalties up to $150,000 per deceptive act.

Indiana residents affected by a data breach have 45 days to expect notification. If your company waited longer or never notified you, the AG can take action — and so can you.

Each company below is an active case in our tracker. Click any company row to open its full case page — what information was exposed, the AG filing date, and how to start a free claim review.