Retail Merchandising Services Reports 2025 Data Breach in Indiana
Retail Merchandising Services disclosed a data breach to Indiana regulators on March 16, 2026, following an incident in November 2025. The breach exposed sensitive personal and financial data, including names, Social Security Numbers, and direct deposit information. This report is based on information filed with state authorities.
- State
- Indiana
- Breach date
- November 24, 2025
- Reported
- March 16, 2026
What may have been exposed
- Full Name
- Social Security Number
- Date of Birth
- Mailing Address
- Wage and Compensation Information
- Direct Deposit Account Details
- Email Address
- Phone Number
Retail Merchandising Services filed a data breach notification with the State of Indiana on March 16, 2026. The company reported an unspecified security incident that occurred on November 24, 2025. This filing indicates that an investigation into the event is currently underway and the situation is being monitored by authorities.
The compromised information includes several categories of personal data. Affected individuals may have had their Full Name, Social Security Number, Date of Birth, and Mailing Address exposed. Additionally, more sensitive financial details such as Wage and Compensation Information and Direct Deposit Account Details were also part of the breach.
Beyond core identity and financial data, the incident also involved Email Address and Phone Number. The exposure of such a broad range of personal identifiers and financial information can create significant risks for those impacted.
Individuals whose data was affected should consider taking proactive measures to protect themselves. These steps generally include monitoring financial statements and credit reports for any suspicious activity. Placing a fraud alert or security freeze on credit files can also help prevent unauthorized accounts from being opened.
It is also advisable to be cautious of unsolicited communications, especially those requesting personal information. Changing passwords for online accounts, particularly those linked to email addresses that may have been compromised, is another recommended safeguard. These general precautions can help mitigate potential harm from the exposed data.
What to do if you were affected
Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.
Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Guard against tax fraud
File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Secure your online accounts
Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: Indiana Attorney General filing
Related data breach cases
- Bozeman School District
- Bozeman School DistrictIN
- Teamsters Local 17
- Teamsters Local 17IN
- Bank
- BankIN
- PeoplesBank
- World Acceptance Corporation
- McKenzie Creative Brands
- MEBS Global Reach
- Midvale Indemnity and American Family Connect Insurance Company
- American Motorcyclist Association
- Nishiyamato Academy
- Deer Management Co. LLC dba Bessemer Venture Partners