If you were affected, free legal review is available — no obligation.
Learn how to participate in the class action and what compensation you may be entitled to.
Join the Class Action →Use our verification tool to confirm your letter matches this official AG filing.
Verify My Notice LetterThis case file references a public filing made with the state filing in TX. This website is not affiliated with, endorsed by, or operated by any state government agency.
Flash Charm, Inc. d/b/a Idera was the subject of a data breach notification filed with the TX Attorney General. The AG filing was recorded on February 27, 2026. The breach or discovery date reported in the filing is August 23, 2025.
From the AG filing description
Flash Charm, Inc., doing business as Idera, operates within the digital infrastructure, software development, and enterprise technology sector. Companies of this profile provide critical database management, developer productivity tools, and application monitoring systems to a vast network of commercial clients, corporate enterprises, and individual consumers. Because Idera's operations sit at the intersection of enterprise software deployment and digital infrastructure management, the company collects, processes, and stores vast quantities of sensitive information. This typically includes proprietary corporate data, administrative credentials, customer account records, internal communications, and, in many instances, personally identifiable information (PII) belonging to users who register for their platforms, software licenses, and technical support services. In 2026, Flash Charm, Inc. d/b/a Idera formally reported a significant security incident to the Office of the Texas Attorney General. In the context of the enterprise technology and software sector, data breaches of this nature frequently stem from sophisticated cyber threats such as unauthorized intrusions into internal database environments, compromised cloud storage repositories, or vulnerabilities exploited within third-party vendor supply chains. When a technology provider suffers an infrastructure compromise, malicious actors often gain unrestricted visibility into internal networks, enabling them to harvest confidential files, exfiltrate user databases, and target administrative access controls before detection mechanisms can fully isolate the threat. The exposure of sensitive records in a technology sector breach presents severe, long-term risks to affected individuals. Depending on the precise scope of the Idera incident, compromised data categories likely include full legal names, email addresses, encrypted or unencrypted passwords, account credentials, physical mailing addresses, telephone numbers, and potentially financial transaction or payment card details associated with software subscriptions and licensing agreements. When user credentials and personal identifiers are leaked, bad actors frequently leverage this information to orchestrate credential-stuffing attacks across multiple platforms, execute targeted phishing campaigns, open unauthorized financial accounts, and commit sophisticated identity theft. Because credentials are often reused across various enterprise and personal accounts, a breach of a software provider's database can trigger a domino effect of secondary security compromises for victims. As a commercial entity entrusted with sensitive digital data, Flash Charm, Inc. d/b/a Idera was bound by robust legal obligations under state and federal law, including the Texas Identity Theft Enforcement and Protection Act and Section 5 of the Federal Trade Commission Act. These statutory frameworks require technology companies to implement and maintain reasonable administrative, technical, and physical safeguards—such as multi-factor authentication, network segmentation, routine vulnerability assessments, and advanced encryption protocols—to protect consumer and client data from unauthorized access. The occurrence of a reportable data breach strongly indicates a potential failure or breakdown in these mandatory security practices, raising serious questions regarding whether the company exercised adequate care in defending its network infrastructure. Receiving a formal data breach notification letter from Flash Charm, Inc. d/b/a Idera is an explicit legal admission that your private information was compromised as a result of inadequate corporate security. Under modern legal standards, the receipt of such a notice often establishes the legal standing necessary to participate in a class action lawsuit, and victims are not required to demonstrate actual financial loss or out-of-pocket fraud to seek legal redress. Our firm is currently investigating potential legal claims on behalf of all individuals whose data was exposed in the Idera security incident. We handle these cases on a strict contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.
Under the Texas Identity Theft Enforcement and Protection Act, you may have a legal claim against Flash Charm, Inc. d/b/a Idera if any of the following apply:
Common categories of compensation in data breach class actions
Courts recognize that the time spent monitoring accounts, placing credit freezes, and dealing with the aftermath of a breach has real economic value. This category of damages is recoverable even without direct financial loss.
When login credentials are exposed, the costs of downstream account compromises — password managers, security audits, and recovery costs for hijacked downstream accounts — can be recovered. Courts in recent class actions have awarded damages for credential exposure even without proven misuse.
Data breach victims regularly report anxiety, loss of sleep, and ongoing fear of identity theft. These non-economic harms are cognizable injuries in data breach litigation, particularly in cases involving SSN or medical record exposure.
Note: an attorney general breach filing does not by itself establish a settlement fund, a payment amount, or a claim deadline. If an official settlement notice is later issued, rely on that notice for payment details and deadlines.
No. Under Texas Identity Theft Enforcement and Protection Act and federal law, the unauthorized exposure of your personal data — regardless of whether it has been actively misused — can be sufficient grounds for a claim. The breach itself is the injury.
Nothing. The Law Office of David S. Harris handles data breach cases on contingency — you pay zero upfront and owe nothing unless compensation is recovered.
State statutes of limitations for data breach claims typically run 2–4 years from the date of the breach or its discovery. Because this breach was recently disclosed, the window is open — but acting early preserves your options and strengthens the case.
Accepting free credit monitoring from Flash Charm, Inc. d/b/a Idera does not waive your right to pursue legal action unless you signed a specific release waiving claims. In most cases, victims who accepted monitoring can still file.
Not necessarily. Many data breach victims are never notified directly. If your personal information was held by Flash Charm, Inc. d/b/a Idera during the relevant period, you may still qualify even without receiving a letter. A free eligibility review can confirm your status.
Most data breach class actions resolve within 18 to 36 months, though timelines vary by court and complexity. Your participation requires minimal effort — typically completing a claim form. Our office handles all litigation; you are notified when a settlement is reached.
Applicable State Law
This breach was reported under the Texas Identity Theft Enforcement and Protection Act, which mandates notification and establishes your right to seek damages.
Flash Charm, Inc. d/b/a Idera breach?
Free case review · No fee unless you win