You received a data breach notification letter
Don't ignore it. It means a company confirmed your personal information was exposed — and you may be entitled to compensation. Filing deadlines apply, so it pays to act early.
What it means
A notification letter is a legal signal, not junk mail
When a company that held your personal data suffers a breach, the law requires it to notify everyone affected. If you got a letter, your information was very likely caught up in a confirmed security incident.
That matters beyond the inconvenience. Exposure of data like your Social Security number, financial accounts, or health records can put you at real risk of identity theft — and it can also give you the right to seek compensation from the company that failed to protect it.
Our attorneys can review your letter and tell you whether you qualify to join a class action or bring an individual claim against the company responsible.
What is a data breach notification letter?
Why did this land in my mailbox?
A company or vendor that stored your personal information confirmed it was exposed in a security incident. State and federal law require them to tell every affected person — so this is a disclosure they're legally obligated to send, not marketing.
What was probably exposed?
It varies by breach, but commonly Social Security numbers, driver's license numbers, financial account details, medical records, or login credentials — the kind of data used for identity theft and fraud.
Who has to send these letters?
Any business, hospital, school, insurer, or government agency that holds personal data. Every U.S. state now has a breach-notification law setting deadlines for telling the people affected.
Do I have to prove I was harmed?
Not to have your case reviewed. Courts have repeatedly treated the unauthorized exposure of personal data as an injury in itself — you generally don't need to show a dollar of loss to be eligible to pursue a claim.
What to do next
Five steps to take after the letter arrives
- 01
Don't throw it out
The letter is a company's written admission that your data was compromised. It's evidence — keep it, along with any follow-up emails or notices.
- 02
See exactly what was taken
Read it closely for the specific data types named — SSN, financial, health, or credentials. What was exposed shapes both your risk and your legal options.
- 03
Move before the clock runs out
Breach claims carry filing deadlines tied to the incident or the notice date. Waiting too long can cost you the right to recover, so treat this as time-sensitive.
- 04
Get a free legal assessment
Send the company name and letter details to our team. An attorney will tell you plainly whether you qualify for a claim or an existing class action — at no cost.
- 05
Let the team handle the rest
If you have a case, we pursue it on contingency — filing, deadlines, and dealing with the company. You pay nothing unless we recover for you.
Do these things right now
Immediate moves that protect you and preserve your legal rights.
- Keep the notification letter and every related message
- Check your credit reports for unfamiliar activity
- Place a fraud alert or credit freeze with the major bureaus
- Watch bank and card statements for signs of identity theft
- Write down any losses or expenses tied to the breach
- Get a free assessment while your filing window is open
Did your letter say “Notice of Data Breach”?
Some companies title the document a data breach notice, a security incident notice, or a notification letter. The name changes — your legal rights don't. Our full guide walks through every version.
Read the full guideTime limits apply — don't wait
Get a free assessment of your notification letter
Our attorneys will review your letter and tell you whether you're eligible for compensation. Every consultation is free, confidential, and carries no obligation.