CA · AG Filing: Jul 30, 2026
Investigation Active — If you were affected, free legal review is available. No obligation.
Learn how to participate in the class action and what compensation you may be entitled to.
Join the Class Action →Use our verification tool to confirm your letter matches this official AG filing.
Verify My Notice LetterThis case file references a public filing made with the state filing in CA. This website is not affiliated with, endorsed by, or operated by any state government agency.
SM Energy Company was responsible for safeguarding the personal data of its customers and employees. According to a CA state filing, SM Energy Company experienced a data security incident affecting an undisclosed number of individuals, exposing sensitive personal information. This breach was recently disclosed and the window for legal action is open now.
SM Energy Company data breach
You may have been affected by the SM Energy Company data breach if:
Applicable State Law
This breach was reported under the California Consumer Privacy Act (CCPA), which mandates notification to affected individuals and establishes your right to seek damages.
Received a notification letter from SM Energy Company?
Read our dedicated guide — what the letter means and exactly what to do.
No. Under California Consumer Privacy Act (CCPA) and federal law, the unauthorized exposure of your personal data — regardless of whether it has been actively misused — can be sufficient grounds for a claim. The breach itself is the injury.
Nothing. The Law Office of David S. Harris handles data breach cases on contingency — you pay zero upfront and owe nothing unless compensation is recovered.
State statutes of limitations for data breach claims typically run 2–4 years from the date of the breach or its discovery. Because this breach was recently disclosed, the window is open — but acting early preserves your options and strengthens the case.
Accepting free credit monitoring from SM Energy Company does not waive your right to pursue legal action unless you signed a specific release waiving claims. In most cases, victims who accepted monitoring can still file.
"According to a state filing in CA on July 30, 2026, this breach affected not publicly disclosed individuals."
View official CA AG filing →SM Energy Company breach?
Free case review · No fee unless you win