Fishman, Larsen & Callister, P.C. (“FLC”) recently disclosed a data breach that impacted 3,606 individuals. The breach occurred in June 2025 after an unauthorized actor gained access to certain data within FLC’s network. The firm is now notifying affected individuals and offering complimentary credit monitoring services.
Fishman, Larsen & Callister Data Breach Investigation
Fishman, Larsen & Callister, P.C., a law firm, reported that it experienced a network disruption on June 9, 2025. Upon discovering the disruption, FLC immediately took steps to secure its network and engaged cybersecurity experts to investigate the incident.
The investigation determined that an unknown actor acquired certain data without authorization on or about June 8, 2025. As part of its response, FLC retained a third-party vendor to conduct a comprehensive review of the affected data to determine whether personal information was involved.
On February 5, 2026, FLC confirmed the scope of the incident and secured sufficient information to begin notifying affected individuals. The total number of persons affected by this breach is 3,606, including one Maine resident.
Although FLC has not publicly disclosed the specific type of hacking method used beyond classifying the incident as an external system breach, the unauthorized acquisition of sensitive personal information presents potential long-term risks to affected individuals.
FLC has stated that it takes the privacy and security of information within its possession very seriously. Upon discovery of the incident, the firm implemented additional security measures designed to enhance its network defenses and reduce the risk of similar incidents in the future. The firm also notified the Federal Bureau of Investigation and is cooperating with any resulting investigation.
Law firms often store highly sensitive information in connection with legal services provided to clients and related business entities. When unauthorized access occurs, individuals whose information was entrusted to the firm may face risks of identity theft, fraud, and misuse of personal data—even if no immediate fraudulent activity has been detected.
At Class Action U, we believe that organizations handling sensitive personal information have a responsibility to implement strong cybersecurity safeguards. When those safeguards fail, affected individuals deserve transparency, protection, and the opportunity to explore their legal rights.
When Did This Breach Occur?
The unauthorized access occurred on or about June 8, 2025.
The network disruption was identified on June 9, 2025.
The scope of the impact was confirmed on February 5, 2026, after completion of the data review process.
What Information Was Breached?
The data involved included:
The notice indicates that personal information was involved, though the full scope of data elements has not been publicly specified. When names are exposed in combination with other sensitive identifiers, individuals may face increased risk of fraud or identity theft.
What You Can Do
If you received a notification letter from Fishman, Larsen & Callister, P.C., consider taking the following steps:
-
Enroll in the complimentary 12 months of credit monitoring and identity theft protection services, which include a $1,000,000 identity theft insurance policy, through Cyberscout (a TransUnion company).
-
Enroll within 90 days of receiving the notification letter to activate the free services.
-
Monitor your financial account statements and credit reports for suspicious activity.
-
Consider placing a fraud alert or security freeze on your credit file.
-
Report any suspected fraud or identity theft to your financial institution, the Federal Trade Commission, and local law enforcement.
Remaining vigilant is essential. Identity theft can occur months or even years after a data breach.
You may also want to explore whether you qualify to join a class action lawsuit related to this incident.
File a Data Breach Lawsuit Against Fishman, Larsen & Callister, P.C.
If your personal information was exposed in this data breach, you may be eligible to pursue compensation. Even when misuse has not yet occurred, the exposure of personal data can create ongoing risks, stress, and the burden of monitoring your financial accounts and credit.
Class action lawsuits allow individuals affected by the same breach to band together to seek accountability and financial recovery. You may be entitled to compensation for out-of-pocket costs, time spent protecting your information, and the increased risk of identity theft.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
