The Michael Larson Co., PC data breach
The Michael Larson Co., PC, a professional services firm in Oregon, reported a data breach on March 18, 2026. This incident exposed highly sensitive client information, raising concerns about the firm's data security practices and the potential impact on affected individuals.
Docket sheet
- Company
- The Michael Larson Co., PC
- Venue
- Oregon Attorney General
- Filed
- March 18, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredJanuary 29, 2026
Date of the incident as stated in the filing.
- 2
Reported to the Oregon Attorney GeneralMarch 18, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Social Security Number
- Date of Birth
- Wage and Compensation Information
- Tax Return Information
- Direct Deposit Account Details
- Financial Account Number
- Home Address
Clerk's notes
The Michael Larson Co., PC, a firm specializing in legal and financial advisory services in Oregon, recently disclosed a data security incident. This breach was formally reported on March 18, 2026, following its discovery on January 29, 2026. Given the firm's role in managing complex client matters, the compromised systems held a significant volume of confidential records.
The investigation into the incident indicates that an unauthorized party gained access to systems containing various types of personal information. The data exposed includes Full Name, Social Security Number, Date of Birth, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, Financial Account Number, and Home Address. Such an extensive exposure of personal and financial data presents a substantial risk of identity theft and financial fraud for those affected.
As a professional services firm, The Michael Larson Co., PC had a responsibility to implement robust security measures to safeguard the sensitive client data entrusted to its care. The occurrence of this data breach suggests a potential failure to adequately protect this information, leading to the current risks faced by affected individuals. Regulatory bodies and legal frameworks typically require such firms to maintain stringent data security protocols.
Receiving a formal data breach notification letter from The Michael Larson Co., PC serves as official acknowledgement that your personal information was compromised. This notification establishes the basis for understanding your rights as an affected individual. If you received such a letter, it is prudent to understand what options may be available to you.
If a notification letter about this breach reached you, see every Oregon data breach on file or browse all cases.
Other Oregon docket entries
- Photon HealthOregon AGOctober 21, 2026Monitoring
- Aldrich Services LLPOregon AGOctober 21, 2026Monitoring
- Roseburg Therapy dba Stronger OregonOregon AGOctober 19, 2026Monitoring
- The City of Mt. AngelOregon AGOctober 13, 2026Monitoring
- Mercadien P.C., CPAsOregon AGOctober 12, 2026Monitoring
- Blueberry PediatricsOregon AGOctober 10, 2026Monitoring
- AllCare Health, Inc.Oregon AGOctober 8, 2026Monitoring
- Hood River DentalOregon AGOctober 8, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.