New Congol LLC dba New Congoleum data breach
New Congoleum, an Indiana-based company, reported a data security incident on May 8, 2026, where sensitive personal information was accessed without authorization. This exposure, which included Social Security Numbers and direct deposit details, presents significant risks for identity theft and financial fraud for those affected. Individuals who received a notification letter should review their legal options.
Docket sheet
- Company
- New Congol LLC dba New Congoleum
- Venue
- Indiana Attorney General
- Filed
- May 8, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredMarch 24, 2026
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralMay 8, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Social Security Number
- Date of Birth
- Mailing Address
- Wage and Compensation Information
- Tax Return Information
- Direct Deposit Account Details
- Employee ID Number
Clerk's notes
New Congol LLC, operating as New Congoleum, an industrial manufacturer and distributor based in Indiana, disclosed a data security incident. This breach was formally reported to authorities on May 8, 2026, indicating unauthorized access to its systems that occurred on or around March 24, 2026.
The compromised data reportedly included Full Name, Social Security Number, Date of Birth, Mailing Address, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, and Employee ID Number. The presence of these specific data categories in one incident increases the potential for serious financial and identity-related harms.
For affected individuals, the exposure of details like Social Security Numbers and Direct Deposit Account Details creates immediate and ongoing risks. This information is frequently targeted by malicious actors for purposes such as opening fraudulent accounts, filing false tax returns, or attempting unauthorized fund transfers.
Companies operating in Indiana, such as New Congoleum, have a legal obligation to protect the personal data they collect and store. A breach involving this scope of sensitive information often points to potential vulnerabilities in a company's data security protocols that warrant further investigation.
If you have received a data breach notification letter from New Congoleum, it confirms that your personal information was impacted by this incident. Understanding the implications of such a compromise and reviewing any available legal recourse is an important step. Our firm evaluates these cases to help individuals understand their rights and potential next steps.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.