Where does the BCGL case file come from?

Every entry is taken from the breach report BCGL lodged with the Indiana Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: BCGL Data Breach

This file collects the dated facts on record for the BCGL incident. The state report is dated December 8, 2025. The incident itself is dated January 4, 2025.

Timeline

338 days separate the incident date from the date it was reported.

January 4, 2025Incident dateWhen the filing says the breach took place.
December 8, 2025Report filed in IndianaDate the notice was lodged with the Indiana Attorney General.

Case facts

Filing state: Indiana
Date reported: December 8, 2025
Incident date: January 4, 2025
Receiving office: Indiana Attorney General

Case notes

BCGL, an Indiana-based professional firm, submitted a formal data breach notification to state authorities on December 8, 2025. This report confirmed an incident of unauthorized access to the firm's systems, which occurred on January 4, 2025. The investigation into the scope and impact of this event is ongoing.

The firm's public filing does not specify the exact types of personal information that may have been compromised during the breach. However, it confirms that unauthorized parties gained access to systems containing personal information. Due to the nature of their operations, law firms typically manage a range of sensitive data for clients and personnel.

Individuals who have received a notification letter directly from BCGL should understand that this indicates their personal information was likely among the data involved in the breach. The notification letter is intended to provide specific details about the incident as it pertains to the individual recipient and any protective measures or identity protection services being offered.

To safeguard your information, it is recommended to remain vigilant for any unusual activity across your personal accounts. Consider monitoring your financial statements and credit reports for suspicious transactions or inquiries. You may also place a fraud alert or security freeze on your credit reports if you are concerned about potential misuse of your personal information.

Questions about this case file

Where does the BCGL case file come from?: Every entry is taken from the breach report BCGL lodged with the Indiana Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Indiana data breaches

Timeline

Case facts

Case notes

Questions about this case file

More Indiana case files