Dill Dill Carr Stonbraker & Hutchings Data Breach Investigation
Dill Dill Carr Stonbraker & Hutchings, P.C. has reported a cyber event that may have involved sensitive personal information belonging to certain individuals. The notice says files may have been accessed or copied without authorization, while stating that no related identity theft or fraud had been identified at the time of the update. Strauss Borrelli PLLC is investigating the incident and the rights of affected people. If you received a notice, fill out the secure contact form on this page to ask whether you may qualify to pursue a claim.
Key Facts at a Glance
- Entity Involved: Dill Dill Carr Stonbraker & Hutchings, P.C. (Legal Services)
- Incident Type: Cyber event involving reported unauthorized access to or copying of information
- Date of Incident: October 22, 2025, to November 11, 2025
- Discovery Date: June 1, 2026
- Official Notice Date: October 20, 2026
- Exposed Information: Names, identification numbers, financial information, login credentials, and medical or health insurance information may have been involved
- Affected Population: 33,613 individuals, according to state filing information
What Happened?
According to Dill Dill’s updated consumer notice, the firm determined on June 1, 2026, that personal information may have been subject to unauthorized access or copying during a reported cyber event. The notice states that the activity occurred between October 22, 2025, and November 11, 2025. Dill Dill said it initiated an investigation into the nature and scope of the event and concluded that certain files may have been viewed or taken without authorization.
The company reported reviewing the potentially involved data to determine whether it contained personal information and whose information was present. That review reportedly found records related to certain individuals. The notice, updated October 20, 2026, says Dill Dill had no indication of identity theft or fraud connected to the event at that time. State filing information lists 33,613 affected individuals. The available notice does not establish that every listed data element was involved for every person.
What Information Was Exposed?
The consumer notice reports that the information involved may include names, Social Security numbers, dates of birth, financial account information, payment card details, login credentials, passport information, and driver’s license or state identification numbers. It also lists alien registration, military, student, tax, tribal, and other government-issued identification numbers, along with medical and health insurance information.
The categories may vary by person. Because the affected entity provides legal services, potentially involved information could be used in client impersonation, fraudulent invoice requests, tax-document scams, or account-verification phishing. Medical or insurance information may also create risks involving fraudulent billing or medical identity misuse.
What Should You Do Next?
- Review your notice carefully: Confirm which information Dill Dill says may have been involved for you. Keep the notice, envelope, and any related communications in a secure location.
- Consider a credit freeze or fraud alert: Contact Equifax, Experian, and TransUnion. A credit freeze can make it more difficult for someone to open a new credit account using your identity, while a fraud alert instructs prospective creditors to take additional verification steps.
- Monitor financial and medical records: Review bank, payment-card, credit, insurance, and medical statements for unfamiliar transactions, claims, providers, or billing activity. Report suspected misuse promptly to the relevant institution.
- Secure potentially affected accounts: Change reused or exposed passwords, use a unique password for each account, and enable multifactor authentication. Treat unexpected password-reset messages and login prompts as suspicious.
- Watch for targeted scams: Be cautious of messages impersonating attorneys, clients, vendors, insurers, or government agencies. Independently verify invoice changes, payment instructions, tax-document requests, and demands for identification before responding. Document suspicious contacts and any losses.
Your Legal Rights
People whose personal information may have been involved could have rights under applicable state privacy, data security, contract, or consumer protection laws. Available options depend on where a person lives, the information involved, the circumstances of the incident, and whether the person experienced losses or other harm.
Receiving a notice does not automatically establish a legal claim, and the available filing does not prove that personal information was misused. Affected individuals may wish to preserve the notice, records of protective measures, suspicious communications, account statements, and documentation of time or expenses. Because legal deadlines and requirements vary, a qualified attorney can evaluate the facts and explain potential options without guaranteeing an outcome.
Why Hire Strauss Borrelli PLLC?
The legal team investigates data privacy incidents and evaluates whether affected individuals may have claims based on the applicable facts and law. Counsel can review the notice, explain how the reported information categories may affect risk, assess documented losses or mitigation expenses, and discuss possible next steps. A case review can also help individuals understand procedural deadlines and the difference between general identity-protection guidance and potential legal remedies. No result can be promised, and any assessment depends on the circumstances of the individual matter.
If you received a breach notification letter from Dill Dill Carr Stonbraker and Hutchings, P.C.:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
