DataBreachInformation.com
Received a ECFA notification letter? Read the letter guide
MonitoringIndiana AG filing · August 12, 2026

ECFA Reports Data Breach Affecting Sensitive Data in Indiana

ECFA, a financial services provider, filed a data security incident report with Indiana regulators on August 12, 2026, concerning an event that occurred on July 9, 2026. The breach may have compromised various categories of sensitive personal and financial information, prompting an ongoing investigation.

State
Indiana
Breach date
July 9, 2026
Reported
August 12, 2026

What may have been exposed

  • Full Name
  • Social Security Number
  • Date of Birth
  • Financial Account Number
  • Routing Number
  • Credit Score Information
  • Income and Wage Records
  • Mailing Address

ECFA, operating in the financial services sector, formally reported a data security incident to Indiana regulatory authorities on August 12, 2026. The company identified July 9, 2026, as the date of the breach. As of the filing, an investigation into the nature and scope of the incident is currently monitoring the situation.

The information reportedly involved in this security event includes Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Credit Score Information, Income and Wage Records, and Mailing Address. Unauthorized access to such a comprehensive set of personal and financial data can carry significant risks for affected individuals.

Potential risks associated with this type of data exposure include identity theft, fraudulent financial transactions, and other forms of financial harm. Individuals receiving notification of this breach should be aware of these possibilities and take proactive steps to safeguard their information.

It is recommended that affected individuals regularly review their financial account statements and credit reports for any unusual or unauthorized activity. Placing a fraud alert with credit reporting agencies or considering a credit freeze can also provide additional protection against the potential misuse of exposed personal information.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Guard against tax fraud

    File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.

  • Watch your financial accounts

    Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases

Browse all Indiana data breachesView the full case directory