11 Reports Data Security Incident to Indiana Regulators

11, a technology company operating in the digital services sector, formally reported a data security incident to the Indiana Attorney General on January 8, 2026. The company stated that the breach took place on October 7, 2025.

The official filing indicates that the security incident led to the exposure of various types of personal data. The reported categories include Full Name, Email Address, Password or Credential Hash, Mailing Address, Phone Number, Purchase and Order History, Payment Card Information, and Account Settings and Preferences.

Exposure of this kind of data can create various risks for affected individuals. Compromised email addresses and credential hashes, for instance, could be used in credential stuffing attacks on other online accounts if individuals reuse passwords. Similarly, knowing a full name, mailing address, and phone number could facilitate targeted phishing attempts or other forms of social engineering.

Individuals who receive a notification regarding this incident from 11 should carefully review their accounts for any suspicious activity. It is advisable to change passwords for any online services where the same or similar credentials may have been used. Consider enabling multi-factor authentication on all sensitive accounts to add an extra layer of security.

Reviewing financial statements and credit reports regularly can help detect any unauthorized transactions or new accounts opened in your name. If you identify any unusual activity, report it immediately to the relevant financial institution. Be cautious of unsolicited emails, calls, or texts, particularly those asking for personal information, even if they appear to be from 11 or other trusted entities.