DataBreachCaseSearch.com

Punch & Associates Investment Management Inc data breach

Punch & Associates Investment Management Inc. filed notice of a data breach with Indiana authorities on August 24, 2026, stemming from an April 2, 2026, incident. This breach reportedly compromised client data such as Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Tax Return Information, Investment Portfolio Records, and Mailing Address. Individuals who received a notification letter should review their legal options.

Docket sheet

Company
Punch & Associates Investment Management Inc
Venue
Indiana Attorney General
Filed
August 24, 2026
People affected
Not stated
Status
Monitoring
Official regulator filing

Where this breach stands

  1. 1

    Breach occurredApril 2, 2026

    Date of the incident as stated in the filing.

  2. 2

    Reported to the Indiana Attorney GeneralAugust 24, 2026

    The company filed a breach notification with the state regulator.

  3. 3

    Attorney reviewCurrent stage

    Current status: Monitoring. Our office is reviewing whether affected people may have claims.

  4. 4

    Your case review

    Got a letter about this breach? Submit it for a free, confidential review.

Information listed in the filing

  • Full Name
  • Social Security Number
  • Date of Birth
  • Financial Account Number
  • Routing Number
  • Tax Return Information
  • Investment Portfolio Records
  • Mailing Address

Clerk's notes

Punch & Associates Investment Management Inc., based in Indiana, officially reported a data breach on August 24, 2026. The company stated that the security incident occurred on April 2, 2026, and involved an unauthorized intrusion into their digital environment. This filing serves as formal notification of the compromise of client data.

According to the report, the exposed information included highly sensitive personal and financial details. Specifically, this data comprised Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Tax Return Information, Investment Portfolio Records, and Mailing Address. The nature of these compromised records places affected individuals at increased risk of identity theft and financial fraud.

For a firm like Punch & Associates, which manages significant financial assets, the security of client data is paramount. The Gramm-Leach-Bliley Act (GLBA) and various state data protection laws require robust safeguards for non-public personal information. A breach of this scope suggests potential vulnerabilities in the security measures designed to protect client records. The investigation into this incident remains in a monitoring status.

Individuals who have received a data breach notification letter from Punch & Associates Investment Management Inc. are formally recognized as potentially affected. This notification establishes the basis for understanding your rights following the exposure of your personal information. Even without immediate financial fraud, the increased risk of future harm and the loss of privacy are significant concerns.

If you received a notification concerning the Punch & Associates Investment Management Inc. data breach, it is advisable to consider seeking a free case review to explore your legal options. Such a review can help clarify the potential impact on your personal and financial security and determine whether you may be entitled to compensation for the risks incurred. This service is typically offered without any upfront cost.

If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.

Other Indiana docket entries

Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.