Dykema Gossett PLLC Reports 2025 Data Breach in Indiana Filing

Law firm Dykema Gossett PLLC reported a data security incident in February 2026 to Indiana authorities, affecting data exposed in November 2025. The breach involved sensitive personal and corporate information, including Social Security Number and financial details. Individuals who received notification should understand the potential risks and consider protective measures.

State: Indiana
Breach date: November 3, 2025
Reported: February 20, 2026

What may have been exposed

Full Name
Social Security Number
Date of Birth
Home Address
Banking and Direct Deposit Details
Tax Return Information
Wage and Compensation Records
Confidential Legal and Personnel Files

Dykema Gossett PLLC, a prominent corporate law firm, filed a data breach notification with Indiana regulators on February 20, 2026. This filing details a security incident that occurred on November 3, 2025. The firm reported the event as part of its obligations under state law, confirming an unauthorized disclosure of sensitive information.

According to the public filing, the compromised data categories include Full Name, Social Security Number, Date of Birth, and Home Address. Also exposed were Banking and Direct Deposit Details, Tax Return Information, Wage and Compensation Records, and Confidential Legal and Personnel Files. These records often contain highly sensitive personal and employment-related information.

Exposure of this type of data carries significant risks for affected individuals. With Social Security Numbers and banking information compromised, there is an increased potential for identity theft, financial fraud, and unauthorized access to accounts. Confidential Legal and Personnel Files could also lead to privacy concerns or targeted phishing attempts.

Individuals who have received a notification from Dykema Gossett PLLC are advised to remain vigilant. It is recommended to monitor bank and credit card statements regularly for any unusual activity. Placing a fraud alert or security freeze on credit reports with the major credit bureaus can also help prevent unauthorized accounts from being opened.

The investigation into the specifics of the Dykema Gossett PLLC incident is reported to be ongoing, focusing on the nature and scope of the unauthorized access. Further details may become available through official channels as the investigation progresses. This information is based on public records filed with state authorities.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Guard against tax fraud
File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases

Browse all Indiana data breaches View the full case directory