Strauss Borrelli PLLC, a leading data breach law firm, is investigating Hartshorne Plunkard Architecture LLC (“HPA”) regarding its recent data breach. The HPA data breach may have involved sensitive personal identifiable information belonging to an undetermined number of individuals.
ABOUT HARTSHORNE PLUNKARD ARCHITECTURE, LLC:
HPA is a full-service architecture, interior and planning design firm based in Illinois.2 Founded in 1987, HPA specializes in new construction, planning design, historic preservation, interior design, green/sustainable, mass timber design, mixed-use and renovation projects.2,3 Headquartered in Chicago, Illinois, HPA operates out of one location and employs over 50 individuals.
WHAT HAPPENED?
Recently, HPA reported to the Attorney General of Vermont that it had experienced a data breach in which sensitive personal identifiable information in its systems may have been compromised. According to the breach notice, on June 11, 2025, HPA became aware of suspicious activity on its network.1 As a result, HPA launched an investigation to determine the nature of the incident.
Through its investigation, HPA confirmed that the sensitive personal information on its server may have been accessed by an unauthorized third party between June 11 and June 12, 2025.1 As a result, HPA began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. On July 21, 2025, HPA completed this review. As of September 12, 2025, the type of information impacted in the breach has not been made publicly available by HPA.¹ However, according to Vermont state reporting guidelines, “personal information” can include the following types of information:
- Name
- Social Security number
- Driver’s license or nondriver State identification card number, individual taxpayer identification number, passport number, military identification card number, or other identification number
- Financial account number or credit or debit card number, if the number could be used without additional identifying information, access codes, or passwords
- A password, personal identification number, or other access code for a financial account
- unique biometric data generated from measurements or technical analysis of human body characteristics such as a fingerprint, retina or iris image
- Genetic information
- Health records or records of a wellness program or similar program of health promotion or disease prevention
- A health care professional’s medical diagnosis or treatment of the consumer
- Health insurance policy number
On September 3, 2025, HPA began mailing data breach notification letters to impacted individuals. Based on the breach notice being sent to Vermont residents, HPA is providing affected individuals with a list of the specific types of sensitive information impacted and complimentary credit monitoring services. 1 A link to breach notification letters that HPA filed with the Attorney General of Vermont is below.
If you received a breach notification letter from Hartshorne Plunkard Architecture, LLC:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
