The John Buck Company Reports Data Breach Following January 2025 Incident
The John Buck Company has reported a data security incident to regulators in Indiana, stemming from an event identified in January 2025. While the specific nature of the breach and the types of personal information involved are not detailed in public filings, affected individuals are advised to carefully review any direct notifications received. The company confirmed an investigation into the matter is ongoing.
- State
- IN
- Breach date
- January 10, 2025
- Reported
- December 22, 2025
The John Buck Company has filed an official data breach notification in Indiana, confirming a security incident that impacted its systems. The breach was identified on January 10, 2025, with the company submitting its report to regulatory authorities on December 22, 2025. The company has stated it is currently investigating the full scope and nature of the event.
Public records do not specify the exact types of personal information that may have been compromised as a result of this breach. Consequently, affected individuals should refer to any direct communication from The John Buck Company for precise details regarding the information involved in their particular case.
Individuals who receive an official notification letter from The John Buck Company are encouraged to read it thoroughly. This letter should provide specific details about how the incident may affect them and outline any measures the company is taking or recommending.
As a general precaution following any data security incident, it is advisable to remain vigilant against potential fraud or identity theft. This includes monitoring financial account statements, credit reports, and being cautious of unsolicited communications, such as emails or phone calls, that request personal details. Regularly changing passwords for online accounts is also a recommended step.
All information regarding this data breach is based on publicly available regulatory filings. The John Buck Company's investigation status is noted as ongoing at the time of the filing.
What to do if you were affected
These general steps can help limit the risk of identity theft and fraud after any data breach.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
What to know about the The John Buck Company data breach
- Where can I see the official The John Buck Company breach notice?
- The John Buck Company's report is published by the IN Attorney General: https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/security-breaches/#the-john-buck-company-2025 Compare it with the letter you received to confirm the dates and details match.
- What should I do after getting the The John Buck Company data breach notice?
- Keep the letter and the envelope, and note the date it arrived. Freeze your credit with Equifax, Experian and TransUnion, change any passwords the notice mentions, and sign up for any free credit monitoring the letter offers. Then check whether you may have a claim.
- Is the The John Buck Company data breach letter legit or a scam?
- A notice from The John Buck Company in the mail matches the breach The John Buck Company reported to the IN Attorney General on December 22, 2025. Check that the company name and dates in your letter match that filing. A real notice of data security incident won't ask for your password, Social Security number or a payment — if it does, contact The John Buck Company through a phone number or website you find yourself.
- Did The John Buck Company offer free credit monitoring?
- Look for an enrollment code in your The John Buck Company notice. Companies that offer free credit monitoring after a breach usually include it there, with a deadline to activate. Using the free service won't stop you from joining a lawsuit or settlement later.
- Can I sue The John Buck Company over the data breach?
- It depends on what was exposed, the law in IN and your own state, and whether you've been harmed. Most people take part through a class action rather than suing alone. Keep your notification letter — it's the proof that connects you to the breach.
- Is there a The John Buck Company data breach class action lawsuit?
- Law firms often open an investigation after a breach notice like this one, and a class action lawsuit may follow. This page doesn't confirm that a lawsuit has been filed against The John Buck Company. You usually don't have to join a class action to be included — if a settlement is reached, class members are notified and can file a claim.
- How much could a The John Buck Company data breach settlement or claim be worth?
- There is no set amount, and no The John Buck Company settlement is confirmed here. In past data breach settlements, payments depended on what data was exposed and on documented losses — fraud, out-of-pocket costs and time spent dealing with the breach. Keep receipts and records; they're what damages claims are built on.
- Do I need a The John Buck Company data breach lawyer or attorney?
- An attorney can read your notice and tell you whether a claim makes sense. A case review here is free, and data breach cases are usually handled on contingency, so there is no upfront cost.
Source: IN Attorney General filing
Related data breach cases
- Bozeman School DistrictIndiana
- Bozeman School District
- Teamsters Local 17Indiana
- Teamsters Local 17
- BankIndiana
- Bank
- PeoplesBankIndiana
- McKenzie Creative BrandsIndiana
- MEBS Global ReachIndiana
- Midvale Indemnity and American Family Connect Insurance CompanyIndiana
- American Motorcyclist AssociationIndiana
- Nishiyamato AcademyIndiana
- Deer Management Co. LLC dba Bessemer Venture PartnersIndiana
- World Acceptance CorporationIndiana