Smith Hawks Data Breach
The 2025 Smith Hawks data breach was a security incident for which the law firm notified people whose personal information may have been affected. The Indiana Attorney General's current report says the November 4, 2025 incident affected 1,406 people in total.
Exposed Data Types
3- Social security numbers
- Financial account information
- Driver's license numbers
About This Breach
The Indiana record lists February 13, 2026 as the consumer-notification date. The sample letter filed in Massachusetts is dated February 16 and confirms that Smith Hawks notified people whose information may have been involved.
How Did the Incident Occur?
Public official documents confirm the incident date and that personal information may have been affected, but they do not disclose the initial access method, affected systems, duration of access, or whether files were acquired. No responsible person or group is identified publicly.
What Information Was Affected?
Massachusetts's official breach report marks Social security numbers, financial account information, and driver's license numbers as affected data types. Each recipient should rely on their own notice; the listed categories do not mean that every type was involved for every affected person.
How Did Smith Hawks Respond?
Smith Hawks said in its February 16 notice that it had no evidence of misuse or attempted misuse of potentially affected information. The firm offered 24 months of complimentary TransUnion credit monitoring and identity-protection services; the enrollment deadline in the letter was May 13, 2026.
What Should Affected People Do?
Notice recipients should regularly review credit reports and financial accounts for unfamiliar activity. A credit freeze or fraud alert may be appropriate when a Social Security number is involved, while driver's-license exposure may warrant contacting the relevant issuing authority. Unexpected messages using the Smith Hawks name should be verified through the firm's known contact channels.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
