ENKR

Tarter Krinsky & Drogin law firm data breach (2025)

Add to my breach check

What leaked12

Replaceable

  • Password

Hard to replace

  • Driver's licence number
  • Passport number
  • Bank account number
  • Other profile data
  • Username

Permanent

  • Biometric data
  • Health information
  • National ID or tax number
  • Social Security number
  • Date of birth
  • Full name
  • Health informationmedical information
  • National ID or tax numbertax identification number, individual or international tax identification number
  • Passwordpassword · form not stated
  • Bank account numberfinancial account information
  • Other profile datahealth insurance information; payment card information · details not stated

To-dos9 · about 2 h 30 min in all

  1. Freeze your credit at Equifax, Experian and TransUnionabout 30 minfreeStops: credit in your name · Limits harm from: applications with your ID (opens in a new tab)
  2. Place a fraud alert on your credit reportsabout 10 minfreeLimits harm from: credit in your name, applications with your ID (opens in a new tab)
  3. Check your credit reports every week, freeabout 20 minfreeHelps you notice: credit in your name, applications with your ID (opens in a new tab)
  4. Change the leaked password everywhere you reused itabout 30 minfreeStops: account takeover
  5. Get an IRS Identity Protection PINabout 20 minStops: tax refund fraud (opens in a new tab)
4 more
  1. This weekTurn on instant transaction alertsabout 5 minHelps you notice: bank account fraud
  2. This weekTurn on two-step sign-in for email and bankingabout 15 minfreeLimits harm from: account takeover
  3. This weekUse an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: account takeover
  4. When convenientFreeze your NCTUE phone and utility fileabout 10 minfreeLimits harm from: phone or utility account (opens in a new tab)

What happened next7 events

  1. Undetected 2 events63 days · Back to latest
  2. Response 3 eventsNotice in 359 days · show events
  3. Remedy 1 eventOngoing · show events
  4. PenaltyNone on record
  5. Disputes 1 eventOngoing · show events

Undetected: 2 events

Back to latest
  1. Suspicious activity found; servers had been accessed at various times from July 9, 2025 to September 9, 2025
  2. Intrusion began
Company
Tarter Krinsky & Drogin
When it happened
–
Company detected it
Notice
Leak confirmed
Affected
196,645 patients of the law firm's healthcare clients · its report to HHS as a business associate

Sources