Harowitz & Morrison PLLC data breach
In January 2026, Indiana-based law firm Harowitz & Morrison PLLC reported a data security incident that occurred in February 2025. The breach exposed a wide range of sensitive personal and financial client information. Affected individuals should be aware of the potential risks and their options for legal assessment.
Docket sheet
- Company
- Harowitz & Morrison PLLC
- Venue
- Indiana Attorney General
- Filed
- January 9, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredFebruary 17, 2025
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralJanuary 9, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Social Security Number
- Date of Birth
- Home Address
- Financial Account Details
- Tax and Income Records
- Legal Case and Settlement Documentation
- Email Address and Phone Number
Clerk's notes
Harowitz & Morrison PLLC, a professional limited liability company based in Indiana, officially reported a data breach to the state's Attorney General on January 9, 2026. This incident, which is currently under monitoring, was identified as having occurred on February 17, 2025. The firm, known for handling sensitive legal matters, acknowledged that confidential data was compromised from its systems.
The exposed information includes highly sensitive client details such as Full Name, Social Security Number, Date of Birth, Home Address, Financial Account Details, Tax and Income Records, Legal Case and Settlement Documentation, and Email Address and Phone Number. The compromise of Social Security Numbers and Dates of Birth creates a direct pathway for identity theft and various forms of fraud. Similarly, exposed Financial Account Details can lead to direct financial losses, while Legal Case and Settlement Documentation may put individuals at risk of targeted scams or extortion.
As a legal institution, Harowitz & Morrison PLLC has a professional and legal obligation under Indiana law, including the Indiana Disclosure of Security Breach Law, to safeguard client data through robust security measures. The occurrence of a breach indicates a potential failure in these protective protocols, raising questions about the adequacy of the firm's cybersecurity defenses against foreseeable digital threats.
Receiving a data breach notification from Harowitz & Morrison PLLC serves as formal acknowledgement that your confidential information was involved in this security incident. Even without immediate financial harm or identity theft, the heightened and enduring risk posed by such an exposure is a valid basis for seeking legal evaluation. This type of incident may form the basis for a class action lawsuit.
If you have been notified about this data breach by Harowitz & Morrison PLLC, it is important to understand your rights and potential recourse. We offer a no-cost, no-obligation case review to help you assess your situation and explore any available legal options.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.