Indiana Law Firm Carter & Shands PC Discloses Data Breach

Carter & Shands PC, an Indiana-based law firm, has formally reported a data breach that occurred on July 26, 2025. The firm submitted its official notice to the Indiana Attorney General on December 31, 2025, confirming an incident where personal information may have been exposed. This disclosure provides public record of the event for individuals who received direct notification from the firm.

State: Indiana
Breach date: July 26, 2025
Reported: December 31, 2025

Carter & Shands PC, a professional corporation operating as a law firm in Indiana, has publicly documented a data breach incident. The breach was identified as occurring on July 26, 2025, and was subsequently reported to the Indiana Attorney General on December 31, 2025.

The public filing regarding this incident broadly indicates the exposure of personal information. However, the specific categories of data involved are not detailed in the official record. The firm's report states that an investigation into the matter is currently underway.

As a law firm, Carter & Shands PC typically handles a variety of sensitive client data. While the nature of the information involved in this particular breach is generalized in public records, individuals who received a notification letter from the firm should consult that document for details specific to their circumstances.

Recipients of an official data breach notification from Carter & Shands PC should carefully review the information provided in that letter. This includes understanding what occurred and any identity protection services or resources the firm may be offering.

As a general precaution, it is advisable for those affected to remain vigilant. Monitoring accounts for any unusual activity and exercising caution with unexpected communications can help mitigate potential risks following any data security incident.

What to do if you were affected

These general steps can help limit the risk of identity theft and fraud after any data breach.

Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Related data breach cases

Browse all Indiana data breaches View the full case directory