DataBreachCaseSearch.com

New Congol LLC dba New Congoleum data breach

New Congoleum, an Indiana-based company, reported a data security incident on May 8, 2026, where sensitive personal information was accessed without authorization. This exposure, which included Social Security Numbers and direct deposit details, presents significant risks for identity theft and financial fraud for those affected. Individuals who received a notification letter should review their legal options.

Docket sheet

Company
New Congol LLC dba New Congoleum
Venue
Indiana Attorney General
Filed
May 8, 2026
People affected
Not stated
Status
Monitoring
Official regulator filing

Where this breach stands

  1. 1

    Breach occurredMarch 24, 2026

    Date of the incident as stated in the filing.

  2. 2

    Reported to the Indiana Attorney GeneralMay 8, 2026

    The company filed a breach notification with the state regulator.

  3. 3

    Attorney reviewCurrent stage

    Current status: Monitoring. Our office is reviewing whether affected people may have claims.

  4. 4

    Your case review

    Got a letter about this breach? Submit it for a free, confidential review.

Information listed in the filing

  • Full Name
  • Social Security Number
  • Date of Birth
  • Mailing Address
  • Wage and Compensation Information
  • Tax Return Information
  • Direct Deposit Account Details
  • Employee ID Number

Clerk's notes

New Congol LLC, operating as New Congoleum, an industrial manufacturer and distributor based in Indiana, disclosed a data security incident. This breach was formally reported to authorities on May 8, 2026, indicating unauthorized access to its systems that occurred on or around March 24, 2026.

The compromised data reportedly included Full Name, Social Security Number, Date of Birth, Mailing Address, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, and Employee ID Number. The presence of these specific data categories in one incident increases the potential for serious financial and identity-related harms.

For affected individuals, the exposure of details like Social Security Numbers and Direct Deposit Account Details creates immediate and ongoing risks. This information is frequently targeted by malicious actors for purposes such as opening fraudulent accounts, filing false tax returns, or attempting unauthorized fund transfers.

Companies operating in Indiana, such as New Congoleum, have a legal obligation to protect the personal data they collect and store. A breach involving this scope of sensitive information often points to potential vulnerabilities in a company's data security protocols that warrant further investigation.

If you have received a data breach notification letter from New Congoleum, it confirms that your personal information was impacted by this incident. Understanding the implications of such a compromise and reviewing any available legal recourse is an important step. Our firm evaluates these cases to help individuals understand their rights and potential next steps.

If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.

Other Indiana docket entries

Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.