Subscribe To Our Newsletter

This field is for validation purposes and should be left unchanged.

Sorenson, Ransom, and Ferguson Data Breach

Sorenson, Ransom, and Ferguson, LLP experienced a data breach involving unauthorized access to email accounts between September and November 2025. Affected individuals should monitor accounts, enroll in protection services, and explore legal options for potential compensation.

Sorenson, Ransom, and Ferguson
Date of Breach: September 23, 2025, to November 24, 2025
CAU logo

Who was affected:

Clients of Sorenson, Ransom, and Ferguson

Impacted Data:

Name

Social Security number (SSN)

Date of birth

Medical information

Health insurance information

Sorenson, Ransom, and Ferguson, LLP recently disclosed a data breach involving unauthorized access to one of its email accounts. The breach may have exposed sensitive personal information, prompting an investigation and offering credit monitoring services to those affected.

Sorenson, Ransom, and Ferguson, LLP’s Data Breach Investigation

Sorenson, Ransom, and Ferguson, LLP, a law firm, has reported a significant data breach involving unauthorized access to one of its email accounts. The breach occurred between September 23, 2025, and November 24, 2025, and was only discovered on March 30, 2026. The firm acted quickly upon learning of the incident, launching a prompt and thorough investigation to determine the scope of the breach and whether any personal data had been compromised.

According to the firm, the affected email account may have contained personal information, and the unauthorized access was detected after a comprehensive forensic investigation. Although the firm has stated that there is no evidence of misuse of the information at this time, the breach raises significant concerns for affected individuals, as unauthorized access to email accounts can lead to identity theft, fraud, and other types of misuse.

The breach highlights the risks that can arise when personal information is stored in digital systems that may be vulnerable to external attacks. Email accounts are often targeted by cybercriminals because they can provide access to a wide range of sensitive data, including client records, financial information, and other personally identifiable details.

Sorenson, Ransom, and Ferguson, LLP has worked with external cybersecurity professionals to investigate the breach and secure its systems. The firm has also been reviewing its internal policies and procedures related to data security to prevent similar incidents in the future. While these measures are important, they do not mitigate the risks for individuals whose personal data may have been compromised.

The firm has acknowledged its responsibility to protect the personal information in its care and is offering complimentary credit monitoring and identity theft protection services through Experian IdentityWorks. These services will help affected individuals monitor their personal information and identify potential misuse. While this support is crucial, it is essential for individuals to take additional steps to safeguard their information.

When Did This Breach Occur?

  • The breach occurred between September 23, 2025 and November 24, 2025
  • The breach was discovered on March 30, 2026
  • Notification was sent on April 20, 2026

What Information Was Breached?

Although the firm has not disclosed the full details of the information involved, the breach may have affected the following types of personal data:

  • Name
  • Social Security number (SSN)
  • Date of birth
  • Medical information
  • Health insurance information

What You Can Do

If you believe your personal information may have been exposed in the Sorenson, Ransom, and Ferguson, LLP data breach, it is important to take immediate steps to protect yourself. While there is no evidence of misuse at this time, unauthorized access to sensitive information can lead to identity theft and financial fraud.

  1. Enroll in Credit Monitoring and Identity Theft Protection: Take advantage of the complimentary credit monitoring services offered by Sorenson, Ransom, and Ferguson, LLP. These services can help detect any unusual activity and provide you with support if your identity is compromised.
  2. Monitor Your Financial Accounts: Regularly review your financial account statements and credit reports for any suspicious or unauthorized activity. Early detection is key to minimizing potential damage.
  3. Place a Fraud Alert or Credit Freeze: Consider placing a fraud alert or credit freeze with the major credit bureaus to protect against unauthorized credit applications. Fraud alerts require businesses to verify your identity before extending credit in your name.
  4. Obtain Your Free Credit Report: You are entitled to one free credit report annually from each of the three major credit bureaus (Equifax, Experian, and TransUnion). Review your credit report for any unfamiliar activity and errors.
  5. Stay Vigilant Against Scams: Be cautious of phishing emails, phone calls, or other unsolicited communications. Cybercriminals may use exposed information to craft convincing scams aimed at obtaining additional personal details.

Understanding your rights is essential. Many individuals affected by data breaches are unaware that they may be eligible to pursue compensation. Exploring your options can help you determine whether you can take legal action and ensure that your experience contributes to holding organizations accountable.

File a Data Breach Lawsuit Against Sorenson, Ransom, and Ferguson, LLP

If you were impacted by the Sorenson, Ransom, and Ferguson, LLP data breach, you may have the right to file a class action lawsuit. Organizations that fail to adequately protect sensitive personal information can be held accountable, and affected individuals may be entitled to recover compensation for damages such as identity theft, financial loss, and time spent addressing fraud-related issues.

Class action lawsuits allow individuals to join together and strengthen their ability to seek justice. By participating in a class action, you can help push for stronger data protection practices and ensure that companies take their responsibilities seriously.

You don’t have to go through this process alone. Many people are entitled to compensation but don’t realize it. Learning about your legal options is an important step toward protecting your rights and potentially recovering damages.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team

Subscribe To Our Newsletter

New cases and investigations, settlement deadlines, and news straight to your inbox.

This field is for validation purposes and should be left unchanged.
Other Data Breaches
Date of Breach: November 26, 2025
Date of Breach: April 14, 2026
Date of Breach: September 29, 2025

Frequently Asked Questions

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.