Data BreachInvestigation Open

Fraser Trebilcock Davis Dunlap & Cavanaugh P.C Data Breach — Official Case File

IN filing|Reported Sep 3, 2026|8 data types exposed

Just received a notice letter? Cases are filed first-come, first-served. You may be entitled to compensation.

Claim Free Review →

Quick Facts

State Filed
IN
Date Reported to AG
Sep 3, 2026
Date of Breach
Mar 17, 2026
Records Affected
Not disclosed
Status
Investigation Open
Last Updated
Oct 5, 2026
Data Types Exposed
Full NameSocial Security NumberDate of BirthHome AddressFinancial Account DetailsTax Return InformationConfidential Legal and Client FilesDriver's License Number

What Happened

Fraser Trebilcock Davis Dunlap & Cavanaugh P.C was the subject of a data breach notification filed with the IN Attorney General. The AG filing was recorded on September 3, 2026. The breach or discovery date reported in the filing is March 17, 2026.

From the AG filing description

Fraser Trebilcock Davis Dunlap & Cavanaugh P.C operates as a prominent legal services firm, handling complex corporate matters, litigation, estate planning, intellectual property, and sensitive client advisory services. Because of the nature of its high-stakes practice, the firm routinely collects, processes, and stores vast quantities of highly confidential information. This repository often includes not only internal employee and operational records but also voluminous client files containing proprietary business secrets, financial statements, personally identifiable information, and private communications. Law firms represent high-value targets for cybercriminals precisely because they serve as central clearinghouses for sensitive data across multiple corporate and individual clients. In 2026, Fraser Trebilcock Davis Dunlap & Cavanaugh P.C reported a data security incident to the Indiana Attorney General. While the precise mechanics of the breach are still being evaluated, incidents involving legal institutions typically arise from sophisticated cyberattacks such as targeted ransomware deployments, unauthorized intrusions into network environments, or vulnerabilities within third-party vendor platforms. Law firm networks are exceptionally attractive to threat actors because a single successful breach can yield access to dozens of corporate clients and thousands of individual identities, making network security and proactive threat monitoring critical defenses that may have been bypassed or failed in this instance. Investigations into legal sector data breaches consistently reveal the exposure of sensitive categories of personal and professional information, including full names, dates of birth, Social Security numbers, banking details, tax documents, and confidential legal documentation. The exposure of this data creates severe, immediate risks for affected individuals. Social Security numbers and dates of birth can be weaponized by cybercriminals to execute identity theft, open fraudulent credit lines, or drain financial accounts. Furthermore, compromised financial data and tax documents expose victims to fraudulent tax filings and direct monetary loss, while leaked legal and corporate records can lead to devastating privacy violations and corporate espionage. Under applicable state and federal data protection frameworks, including the Indiana Disclosure of Security Breach Law and Section 5 of the Federal Trade Commission Act, Fraser Trebilcock Davis Dunlap & Cavanaugh P.C had a strict legal obligation to implement and maintain reasonable cybersecurity measures to safeguard sensitive information entrusted to its care. This duty requires continuous risk assessments, encryption protocols, access controls, and rapid patching of network vulnerabilities. The occurrence of a widespread data breach strongly suggests a potential failure in these administrative and technical safeguards, raising serious questions about whether the firm lived up to its legal and professional standards of data stewardship. Receiving a data breach notification letter from Fraser Trebilcock Davis Dunlap & Cavanaugh P.C serves as formal legal acknowledgment that your personal data was compromised due to inadequate security practices. Under modern jurisprudence, the receipt of such a notice establishes legal standing to participate in a class action lawsuit seeking accountability, restitution, and enhanced credit monitoring protections. You do not need to prove that you have already suffered actual financial fraud to join this legal action. Our law firm handles these complex privacy cases on a contingency fee basis, meaning there are never any out-of-pocket costs or upfront legal fees, and we only get paid if we successfully recover compensation on your behalf.

Exposed Data — What's at Risk

Based on the data types reported in this filing:

Identity Theftcritical risk

Your SSN is the master key to your identity. Once exposed, criminals can open new lines of credit, take out loans, or file taxes in your name.

Identity Verification Bypassmedium risk

Combined with a name and other leaked data, date of birth helps criminals pass identity verification questions at banks and government agencies.

Do You Qualify for Compensation?

You may have been affected by the Fraser Trebilcock Davis Dunlap & Cavanaugh P.C data breach if:

  • You received a written data breach notification letter from Fraser Trebilcock Davis Dunlap & Cavanaugh P.C
  • You are or were a customer, patient, or employee of Fraser Trebilcock Davis Dunlap & Cavanaugh P.C
  • Your information was held by Fraser Trebilcock Davis Dunlap & Cavanaugh P.C in IN
  • Your bank or payment card data was potentially exposed

Your Rights as a Victim

Common categories of compensation in data breach class actions

Time & Inconvenience

Courts recognize that the time spent monitoring accounts, placing credit freezes, and dealing with the aftermath of a breach has real economic value. This category of damages is recoverable even without direct financial loss.

Credit Monitoring & Identity Restoration

Professional credit monitoring services cost $10–$40 per month. Identity theft restoration services, if needed, can cost hundreds of hours and thousands of dollars. Courts have awarded these costs as direct damages in SSN breach cases.

Financial Losses & Fraudulent Charges

Direct financial losses resulting from the breach — unauthorized charges, fraudulent transfers, or fees incurred through fraud — are recoverable as compensatory damages. Banks may reverse some charges; a class action recovers the remainder and associated costs.

Statutory Minimum Damages

Several state data breach laws provide for statutory minimum damages — fixed amounts recoverable per affected individual regardless of actual loss. These provisions exist specifically to make legal action viable for victims who have not yet experienced direct harm.

Note: an attorney general breach filing does not by itself establish a settlement fund, a payment amount, or a claim deadline. If an official settlement notice is later issued, rely on that notice for payment details and deadlines.

Applicable State Law

This breach was reported under the Indiana data breach notification law, which mandates notification and establishes your right to seek damages.

Frequently Asked Questions

Do I need proof that my data was misused to file a claim against Fraser Trebilcock Davis Dunlap & Cavanaugh P.C?

No. Under Indiana data breach notification law and federal law, the unauthorized exposure of your personal data — regardless of whether it has been actively misused — can be sufficient grounds for a claim. The breach itself is the injury.

How much does filing a claim cost?

Nothing. The Law Office of David S. Harris handles data breach cases on contingency — you pay zero upfront and owe nothing unless compensation is recovered.

My Social Security Number was exposed. What should I do right now?

Immediately place a free credit freeze at all three bureaus (Equifax, Experian, TransUnion). A freeze blocks new accounts from being opened in your name. Then file a complaint with the FTC at IdentityTheft.gov and contact our office — SSN exposure is one of the most serious breach types.

My financial account data was exposed. Can the bank recover my losses?

Banks may reverse fraudulent charges, but they are not obligated to compensate you for time lost, stress, or indirect damages. A class action claim against the breached company can recover those additional categories of harm.

Is there a deadline to file a claim?

State statutes of limitations for data breach claims typically run 2–4 years from the date of the breach or its discovery. Because this breach was recently disclosed, the window is open — but acting early preserves your options and strengthens the case.

What if Fraser Trebilcock Davis Dunlap & Cavanaugh P.C offered me free credit monitoring after the breach?

Accepting free credit monitoring from Fraser Trebilcock Davis Dunlap & Cavanaugh P.C does not waive your right to pursue legal action unless you signed a specific release waiving claims. In most cases, victims who accepted monitoring can still file.

Do I need to have received a notice letter to be eligible?

Not necessarily. Many data breach victims are never notified directly. If your personal information was held by Fraser Trebilcock Davis Dunlap & Cavanaugh P.C during the relevant period, you may still qualify even without receiving a letter. A free eligibility review can confirm your status.

Received a notification letter from Fraser Trebilcock Davis Dunlap & Cavanaugh P.C?

Read our dedicated guide — what the letter means and what to do.

Read Letter Guide →
Filing Window Open

Received a Notice Letter?

Cases are filed first-come, first-served. Submit now for a free attorney review — no cost, no obligation.

Start typing to find a matching case, or enter a company not yet listed.

Attach a copy of your data breach notification letter. Accepted: PDF, JPG, PNG — max 10 MB.

No attorney-client relationship is created by submitting this form. Attorney Advertising.

Fight Back — Join the Case

Learn how to participate in the class action and what compensation you may be entitled to.

Join the Class Action →

Received a notice letter?

Use our verification tool to confirm your letter matches this official AG filing.

Verify My Notice Letter

This case file references a public filing made with the state filing in IN. This website is not affiliated with, endorsed by, or operated by any state government agency.

Case review window ends October 29, 2026 — review your letter.

Review Your Letter →

Fraser Trebilcock Davis Dunlap & Cavanaugh P.C breach?

Free case review · No fee unless you win

Call Now