The 282Cornick, Garber, & Sandler LLP Data Breach: Incident Facts and Free Case Review

In 2026, Cornick, Garber, & Sandler LLP reported a significant data security incident to the Indiana Attorney General, triggering legal scrutiny and mandatory notifications. While the precise vector of the compromise—whether driven by sophisticated external ransomware, unauthorized third-party network access, or an infrastructure misconfiguration—remains under active review, security incidents impacting legal institutions typically involve unauthorized actors gaining entry to enterprise document management systems and legacy databases. Law firms are prime targets for cybercriminals precisely because they act as centralized repositories for high-value corporate and individual data.

The data compromised in the breach encompasses a dangerous cross-section of personal and professional identifiers. Depending on the scope of the affected systems, exposed records likely include full names, dates of birth, Social Security numbers, banking and trust account details, tax documents, and confidential correspondence detailing sensitive legal and financial disputes. When exposed, these categories of information create severe, multi-faceted risks for victims. Social Security numbers and personal identifiers lay the groundwork for long-term identity theft and fraudulent credit applications, while compromised financial and tax records expose individuals and corporate clients to immediate financial account takeovers and fraudulent wire transfers.

Under Indiana state data protection statutes, as well as common law duties of care and professional ethics obligations regarding client confidentiality, Cornick, Garber, & Sandler LLP had a strict legal responsibility to implement and maintain robust administrative, physical, and technical safeguards to secure this data. Professional service firms are expected to adhere to industry-standard data security frameworks, including end-to-end encryption, multi-factor authentication, regular vulnerability assessments, and strict access controls. The occurrence of a data breach of this magnitude strongly suggests potential failures in these foundational security protocols, raising serious questions about whether the firm adequately protected the sensitive information entrusted to its care.

Receiving an official data breach notification letter from Cornick, Garber, & Sandler LLP is a formal acknowledgment that your private information was compromised due to the firm's security failures. Legally, this notice establishes that your data was exposed, granting you standing to participate in a class action lawsuit aimed at holding the firm accountable. Importantly, victims do not need to wait until financial fraud has already occurred to seek legal recourse; the increased risk of future identity theft and the loss of privacy are recognized harms. Our firm evaluates these cases on a contingency fee basis, meaning you pay nothing out of pocket, and we only collect a fee if we successfully recover compensation on your behalf.