Were you recently affected by a data breach?

Trellix Data Breach

Trellix, a cybersecurity company operated by Musarubra US LLC, notified individuals that a data security incident exposed personal information including Social Security numbers. Affected individuals may be entitled to compensation.

Trellix
Date of Breach: Not publicly disclosed
CAU logo

Who was affected:

Clients of Trellix

Impacted Data:

Names, Social Security numbers

Trellix recently notified individuals that their personal information may have been accessed without authorization following a data security incident. Companies that handle sensitive personal information, even cybersecurity firms whose business is protecting data, have a responsibility to safeguard it against unauthorized access.

Trellix’s Data Breach Investigation

Data breach attorneys are investigating a security incident affecting Musarubra US LLC, doing business as Trellix, a cybersecurity technology company headquartered in Plano, Texas. Trellix, the successor to McAfee Enterprise and FireEye, develops extended detection and response software solutions designed to protect organizations from cyber threats.

On August 28, 2026, Trellix began notifying affected individuals that their private information had been accessed in a data security incident. According to the company’s own notification letter, Trellix states it is not aware of any misuse of affected individuals’ personal information as a result of the incident, but as a precaution it has arranged two years of complimentary identity and credit monitoring services through IDX for those affected, including credit monitoring, fraud consultation, and identity restoration services.

Trellix’s notification letter does not specify the date the underlying incident occurred, nor does it disclose the cause of the breach or how many individuals were affected. The company reported the incident to the Massachusetts Office of Consumer Affairs and Business Regulation as part of its regulatory notification obligations.

The fact that even a company specializing in cybersecurity defense can experience a breach of this kind underscores how difficult it can be for any organization to fully prevent unauthorized access to sensitive data. Individuals whose Social Security numbers and other personal information are exposed in incidents like this remain at heightened risk of identity theft and fraud, sometimes for years after the initial intrusion, regardless of the technical sophistication of the company involved.

When Did This Breach Occur?

Trellix’s notification letter, dated August 28, 2026, does not disclose the specific date or timeframe during which the underlying security incident occurred. The letter states only that Trellix is writing to inform recipients about a recent incident involving their personal information and that the company began arranging identity and credit monitoring services in response. Individuals who received a notice should retain it, as it may contain incident-specific details not reflected in public reporting.

What Information Was Breached?

According to Trellix’s own notification letter, the breach involved certain personal information relating to affected individuals. Public reporting connected to this incident indicates that the categories of information at risk include Social Security numbers. Trellix has not published a complete, itemized breakdown of every data element involved for each individual, and the company states it is not aware of any confirmed misuse of the affected information to date.

What You Can Do

If you received a data breach notification letter from Trellix, consider taking the following steps to protect yourself:

  • Enroll in the complimentary two-year IDX identity and credit monitoring membership offered in your notification letter.
  • Place a fraud alert or security freeze with Equifax, Experian, and TransUnion.
  • Regularly review your account statements and credit reports for unfamiliar activity.
  • Report any signs of identity theft or fraud promptly to your financial institutions and to the Federal Trade Commission.
  • Keep a copy of your notification letter, as it may be needed to support any future identity theft claim.

File a Data Breach Lawsuit Against Trellix

If you received a notice that your information was involved in the Trellix data breach, you may have legal options available to you. Companies that collect and store sensitive personal information are expected to implement reasonable safeguards to protect it, and a breach of this kind can leave affected individuals vulnerable to fraud and identity theft.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.

Were you recently affected by a data breach?
Other Data Breaches
Date of Breach: August 7, 2026
Date of Breach: December 1-7, 2025
Date of Breach: Not publicly disclosed
Related News

Frequently Asked Questions

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.