Form Energy Data Breach Lawsuit

Form Energy, Inc., along with its subsidiaries Form Factory 1, LLC, and Form Energy Works, LLC, has recently informed individuals that their personal information may have been involved in a cybersecurity incident. The breach was caused by a ransomware attack, and the company has since taken action to investigate and address the issue. To mitigate the potential impact of the breach, Form Energy is offering complimentary credit monitoring and identity theft protection services to those affected.

Form Energy’s Data Breach Investigation

On September 16, 2025, Form Energy became aware of a ransomware attack on its systems. In response, the company took immediate steps to secure affected systems by taking them offline and engaging external cybersecurity experts to assist with the investigation. Forensic analysis revealed that one of the compromised machines contained historical employee personal information, dating back to team members who worked at the company as of, and prior to, September 2023.

Through their investigation, Form Energy identified that various types of personal information were potentially exposed, including sensitive data such as names, addresses, dates of birth, Social Security numbers, bank account numbers, I-9 verification documents (such as driver’s licenses, permanent resident cards, alien registration cards, or passports), and beneficiary information. Form Energy has indicated that there is no direct evidence of misuse of the personal data at this time. However, out of an abundance of caution, the company has taken steps to inform affected individuals and provide resources to help protect their information.

In addition to notifying those affected, Form Energy is offering a complimentary 24-month membership in Experian IdentityWorksSM, which includes credit monitoring and identity theft protection services. This service also provides fully managed identity theft recovery services should you need assistance in the future.

When Did This Breach Occur?

The ransomware attack occurred on September 16, 2025, and was promptly investigated by Form Energy. The company has since provided notification to those whose personal information may have been involved in the breach.

What Information Was Breached?

The following personal information may have been exposed during the breach:

• Name
• Address
• Date of Birth
• Social Security Number
• Bank Account Number
• I-9 Verification Documents (such as Driver’s License, Permanent Resident Card, Alien Registration Card, or Passport Information)
• Beneficiary Information (if applicable)

Form Energy has also stated that if any beneficiaries’ information was affected, those individuals will receive a separate notification.

What You Can Do

If you believe your personal information was involved in this breach, there are several steps you can take to protect yourself:

• Enroll in credit monitoring services: Form Energy is offering 24 months of complimentary credit monitoring and identity theft protection services through Experian IdentityWorksSM. To activate this service, visit the enrollment link provided in your notification and sign up by January 31, 2026. Be sure to review your credit activity regularly for any signs of unauthorized use.
• Monitor your credit reports: Obtain a free annual credit report from each of the three major credit bureaus (Equifax, Experian, and TransUnion) to check for any unusual or fraudulent activity.
• Place a fraud alert or credit freeze: Consider placing an initial fraud alert on your credit file, which will prompt businesses to verify your identity before extending new credit. If you are a victim of identity theft, you may place a longer, seven-year extended fraud alert. Alternatively, you can place a credit freeze on your file, which prevents anyone from accessing your credit report without your permission.
• Stay vigilant: Regularly review your financial accounts and monitor for any suspicious transactions. If you notice anything unusual, contact your bank or financial institution immediately to take appropriate action.

Form Energy has also encouraged individuals to take proactive steps to protect their personal information and to reach out for support if necessary.

File a Data Breach Lawsuit Against Form Energy