Indiana Professional Licensing Agency data breach
The Indiana Professional Licensing Agency (IPLA) reported a data breach on August 28, 2026, impacting licensed professionals across the state. This incident exposed sensitive personal and professional data collected by the agency, raising significant concerns about identity theft and privacy for those affected.
Docket sheet
- Company
- Indiana Professional Licensing Agency
- Venue
- Indiana Attorney General
- Filed
- August 28, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredAugust 10, 2026
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralAugust 28, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Social Security Number
- Date of Birth
- Home Address
- Professional License Number
- Background Check Disclosures
- Phone Number
- Email Address
Clerk's notes
On August 28, 2026, the Indiana Professional Licensing Agency (IPLA) officially reported a security incident to the Indiana Attorney General. This breach involves a state regulatory body responsible for overseeing numerous professions, from healthcare to real estate, and maintaining extensive records for hundreds of thousands of licensees.
The IPLA functions as a central repository for comprehensive personal and professional dossiers. The agency collects detailed information required for licensing, renewals, and disciplinary actions, making it a target for malicious actors seeking high-value data. The breach’s exact cause remains unspecified, but it highlights potential vulnerabilities in systems designed to protect sensitive state-held information.
Investigations indicate that the exposed data includes highly sensitive categories critical for identity verification and professional standing. The reported compromised information includes Full Name, Social Security Number, Date of Birth, Home Address, Professional License Number, Background Check Disclosures, Phone Number, and Email Address. This combination of data can place affected individuals at elevated risk for identity theft, fraud, and other personal security threats.
For individuals whose Professional License Number, Social Security Number, and other personal details were compromised, the potential for long-term issues is considerable. It is advisable to remain vigilant about unexpected communications, account activity, and credit reports. Many affected individuals find it helpful to monitor their credit and financial statements regularly for any suspicious activity.
If you received a data breach notification letter from the Indiana Professional Licensing Agency, it means your specific information was identified as compromised in this event. Understanding the implications of this exposure and knowing your options is important. You may wish to seek guidance on protecting yourself from potential harm.
Individuals impacted by this breach may be eligible to request a free case review. This allows you to discuss the specifics of your situation and learn more about potential legal avenues without any obligation.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.