Lorenz & Creed Law Firm, PLLC has filed a data breach notice with the Massachusetts Attorney General. This page explains what the notice says, what it leaves out and what steps people can take.
Law firms keep sensitive records about their clients and others, so an event involving a firm’s systems is a serious matter for the people whose information it holds.
Lorenz & Creed Law Firm, PLLC’s Data Breach Investigation
Lorenz & Creed Law Firm, PLLC is a law firm in Southern Pines, North Carolina. It filed a notification letter with the Massachusetts Attorney General’s data breach notification list. The letter is dated November 6, 2026, and it was sent in the name of the firm through Cyberscout, a TransUnion company that handles notification and monitoring services for many organizations.
The letter opens by telling the recipient that the firm writes to notify them of a recent event that may have involved their information. It says the firm takes the privacy and security of all information seriously and that the letter includes information about the event, the firm’s response and resources it is making available. The filed copy, however, says very little about the event itself.
The letter does not describe what happened. It does not say when the event took place, how it was discovered or whether information was taken or only exposed. It also does not say which types of personal information were involved, and it does not give a total number of affected people. Web searches for this page did not turn up a press release, a news report or another state’s filing that fills in those gaps, so this page does not guess at them.
What the letter does describe is the protection the firm is offering. As a safeguard, it says, the firm arranged for recipients to enroll at no cost in an online credit monitoring service for 24 months, provided by Cyberscout, a TransUnion company. The letter explains that, because of privacy laws, the firm cannot register people directly, so anyone who wants the service must enroll themselves using an activation code printed on their own letter.
The enclosed instructions walk through the enrollment steps for people who are new to the MyTrueIdentity service and for people who already have an account. The letter says recipients must enroll within 90 days of the date of the letter. It adds that enrollment requires an internet connection and an email account, that the service may not be available to people under 18, and that recipients may be asked to verify personal information to confirm their identity.
Beyond enrolling, the letter recommends that people remain vigilant by regularly reviewing and monitoring their account statements and credit history to guard against unauthorized transactions or activity. If someone finds anything suspicious on an account, the letter says to change the password promptly, take additional steps to protect the account and notify the financial institution or company if applicable. It also says to report suspicious incidents to local law enforcement or the person’s State Attorney General.
The enclosed steps document explains that U.S. law entitles people to one free credit report each year from each of the three major credit bureaus, TransUnion, Experian and Equifax, which can be ordered at annualcreditreport.com. It also explains the right to place an initial or extended fraud alert on a credit file at no cost, and the right to place a credit freeze, which stops a bureau from releasing information in a credit report without the person’s express authorization. The document notes that a freeze may delay or interfere with the timely approval of new credit and that it cannot be charged for under federal law.
For questions, the letter provides a dedicated call center that it says is open Monday to Friday between 8:00 a.m. and 8:00 p.m. Eastern time, excluding holidays. People can also write to the firm at its address in Southern Pines, North Carolina.
Federal and state laws require organizations to safeguard personal information and to notify people when it may have been exposed. Attorneys reviewing incidents like this one look at how the information was protected, how promptly people were told, and whether those affected may have legal options. This page relies only on the filed notice and may be updated as more information becomes available.
When Did This Breach Occur?
The filed notice does not say when the event occurred or when the firm discovered it. The only date it gives is the date of the letter itself, November 6, 2026, and recipients are told to enroll in the monitoring offer within 90 days of that date. Other dates are not publicly available at this time.
What Information Was Breached?
The filed copy of the notice does not say which types of personal information were involved. It refers only to a recent event that may have involved a recipient’s information, so the specific types of information have not been publicly disclosed. If you receive a notice, check it for the details that apply to you.
What You Can Do
If you received a notice related to Lorenz & Creed Law Firm, PLLC or believe you may be affected, consider these steps:
- Read the notice carefully and keep it, along with any enrollment details for protection services it offers.
- Enroll in the 24 months of complimentary credit monitoring using the activation code on your letter, within 90 days of the date of the letter.
- Place a free fraud alert or a credit freeze with Equifax, Experian and TransUnion, and get your reports free at annualcreditreport.com.
- Review bank, card and insurance statements for anything you do not recognize.
- Be skeptical of unexpected calls, texts or emails that mention the incident, and report suspected identity theft to the Federal Trade Commission at identitytheft.gov.
File a Data Breach Lawsuit Against Lorenz & Creed Law Firm, PLLC
If you received a notice from Lorenz & Creed Law Firm, PLLC, or you believe your personal information was exposed in this event, you may have legal options. Whether you can seek compensation depends on the facts, and an attorney can explain whether you may be able to join a class action lawsuit over the exposure of your personal information.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
