Tlusty, Kennedy & Glascock Data Breach Lawsuit Investigation
A ransomware attack on Tlusty, Kennedy & Glascock has put sensitive personal and medical data at risk. If you received a breach notification letter, review the facts below and consider your legal rights and next steps.
Take action: Enroll in the free identity-protection services by the enrollment deadline, monitor your accounts closely, and explore potential compensation options.
Key Timeline
- November 18, 2025 — Firm discovered unauthorized access and ransomware encryption.
- January 2, 2026 — Breach reported to the Idaho Attorney General.
- January 5, 2026 — Consumer notification letters scheduled for mailing.
- April 5, 2026 — Deadline to enroll in complimentary IDX services.
What Happened
According to the official notice filed in Idaho, an unknown third party infiltrated Tlusty, Kennedy & Glascock’s systems on November 18, 2025, encrypted data, and demanded a ransom. The firm secured its environment, engaged investigators, and determined which records were involved. No ransom was paid.
Information Exposed
The investigation indicates the following data elements may have been compromised:
- Name
- Address
- Social Security number
- Medical information
Firm’s Response
Tlusty, Kennedy & Glascock reported the incident to law enforcement, including the FBI, and states it continues to evaluate and implement additional safeguards. The firm is offering complimentary identity-theft protection through IDX, which features:
- Credit and CyberScan monitoring
- $1 million insurance reimbursement policy
- Fully managed identity-recovery services
Impacted individuals can enroll online at app.idx.us/account-creation/protect or by calling 1-833-788-9712, Monday–Friday, 9 a.m.–9 p.m. ET.
Download Official Breach Notice (PDF)What You Can Do Now
- Enroll in the free IDX services before the April 5, 2026 deadline.
- Review explanation-of-benefits statements and medical records for unfamiliar services.
- Monitor credit reports and banking activity for new accounts or charges you did not authorize.
- Place a fraud alert or security freeze with the credit bureaus if you detect suspicious activity.
- Retain all breach-related correspondence in case legal remedies become available.
Legal Options
Data-breach victims often pursue class-action litigation or individual claims to recover out-of-pocket expenses, time, and potential future risk. Eligibility typically depends on the type of information exposed and resulting harm. Preserve your notification letter and any evidence of fraud, then consult a data-privacy attorney to discuss joining or initiating a lawsuit against Tlusty, Kennedy & Glascock.
Company Overview
- Full Legal Name: Tlusty, Kennedy & Glascock, S.C. (Tlusty, Kennedy & Glascock)
- Industry: Legal Services
- Year Founded: 1975
- Headquarters: 1155 Grand Avenue, Schofield, Wisconsin, United States
- Website: tlustylaw.com
- Contact: tlustylaw.com/contact/
- Facebook: facebook.com/tlustylaw
Frequently Asked Questions
I received a data breach letter from Tlusty, Kennedy & Glascock — what should I do?
Enroll in the free IDX services immediately, watch for suspicious activity, and keep the letter for your records.
How do I submit a claim related to the Tlusty, Kennedy & Glascock data breach?
Gather your notification letter and any evidence of identity misuse, then speak with a data-breach attorney to explore class-action or individual claim options.
What information did the Tlusty, Kennedy & Glascock breach expose?
Name, address, Social Security number, and medical information may have been compromised.
Did Tlusty, Kennedy & Glascock offer credit monitoring, and for how long?
Yes. The firm partnered with IDX to provide credit and CyberScan monitoring, a $1 million insurance policy, and identity-recovery assistance at no cost. The enrollment deadline is April 5, 2026.
How many people were affected by the Tlusty, Kennedy & Glascock breach?
The firm has not disclosed the total number of impacted individuals.
How can I get the official breach notice PDF for Tlusty, Kennedy & Glascock?
You can download the document directly from the Idaho Attorney General’s website using the button provided above.
