ECFA data breach

Clerk's notes

On August 12, 2026, ECFA, a financial services and credit counseling provider, formally reported a data security incident to the Indiana Attorney General. This event, which reportedly occurred on July 9, 2026, involved an unauthorized compromise of ECFA's network infrastructure, with the specific breach type currently unspecified and under ongoing investigation. The incident is presently under monitoring by authorities.

The compromised information includes a range of highly personal and financial data points. Specifically, the exposed categories include Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Credit Score Information, Income and Wage Records, and Mailing Address. The aggregation of these data types creates significant risks for affected individuals.

Exposure of such comprehensive personal and financial details means victims face elevated risks of identity theft, fraudulent financial transactions, and account takeovers. Cybercriminals could potentially use this information to open new lines of credit, drain existing bank accounts, or intercept tax refunds, leading to significant financial and emotional distress for those affected by the breach.

As a financial services provider, ECFA was legally obligated to implement robust data security measures to protect consumer information under relevant state and federal regulations. The occurrence of this data breach raises serious questions about whether these foundational legal standards were adequately met in safeguarding the sensitive data entrusted to ECFA's care.

For consumers who have received a data breach notification letter from ECFA, this correspondence confirms that your confidential information was compromised. Receiving this notice establishes your standing to seek further information regarding your rights. If you received a notification, you may be eligible to request a free review of your specific situation.

If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.