Punch & Associates Investment Management Inc data breach
Punch & Associates Investment Management Inc. filed notice of a data breach with Indiana authorities on August 24, 2026, stemming from an April 2, 2026, incident. This breach reportedly compromised client data such as Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Tax Return Information, Investment Portfolio Records, and Mailing Address. Individuals who received a notification letter should review their legal options.
Docket sheet
- Company
- Punch & Associates Investment Management Inc
- Venue
- Indiana Attorney General
- Filed
- August 24, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredApril 2, 2026
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralAugust 24, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Social Security Number
- Date of Birth
- Financial Account Number
- Routing Number
- Tax Return Information
- Investment Portfolio Records
- Mailing Address
Clerk's notes
Punch & Associates Investment Management Inc., based in Indiana, officially reported a data breach on August 24, 2026. The company stated that the security incident occurred on April 2, 2026, and involved an unauthorized intrusion into their digital environment. This filing serves as formal notification of the compromise of client data.
According to the report, the exposed information included highly sensitive personal and financial details. Specifically, this data comprised Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Tax Return Information, Investment Portfolio Records, and Mailing Address. The nature of these compromised records places affected individuals at increased risk of identity theft and financial fraud.
For a firm like Punch & Associates, which manages significant financial assets, the security of client data is paramount. The Gramm-Leach-Bliley Act (GLBA) and various state data protection laws require robust safeguards for non-public personal information. A breach of this scope suggests potential vulnerabilities in the security measures designed to protect client records. The investigation into this incident remains in a monitoring status.
Individuals who have received a data breach notification letter from Punch & Associates Investment Management Inc. are formally recognized as potentially affected. This notification establishes the basis for understanding your rights following the exposure of your personal information. Even without immediate financial fraud, the increased risk of future harm and the loss of privacy are significant concerns.
If you received a notification concerning the Punch & Associates Investment Management Inc. data breach, it is advisable to consider seeking a free case review to explore your legal options. Such a review can help clarify the potential impact on your personal and financial security and determine whether you may be entitled to compensation for the risks incurred. This service is typically offered without any upfront cost.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.