Tungsten Automation Corporation Data Breach Lawsuit Investigation
Did you get a letter from Tungsten Automation (formerly Kofax) warning that hackers stole your personal data? Over 5,500 consumers are now at risk of identity theft after the company’s May 2025 cyber-attack. Find out how to protect yourself and see if you can seek compensation below.
Download Official Breach Notice (PDF)What Happened?
Tungsten Automation Corporation—known to many customers as Kofax—detected suspicious activity in its network on May 27, 2025. An internal investigation confirmed that an unauthorized actor infiltrated company systems a week earlier, on May 20. Stolen files reportedly contained sensitive data for at least 5,556 individuals across the United States.
Information Potentially Exposed
- Full names and contact details
- Social Security numbers
- Dates of birth
- Driver’s license or state ID numbers
- Addresses
- Financial or payment information
- Government-issued identifiers and, in some cases, medical information
When Were Victims Notified?
The breach was formally reported to state regulators in . Notification letters were mailed the same day. If you received one, you have important rights and deadlines—many states give only a limited window to pursue legal claims or activate complimentary monitoring services.
Your Complimentary Identity Protection
Tungsten Automation is offering 24 months of Experian IdentityWorks, which includes:
- Credit monitoring across all three bureaus
- Dark-web surveillance
- Identity restoration help
- Up to $1 million in ID-theft insurance
We recommend enrolling immediately and saving confirmation of your enrollment for future reference.
Legal Options: Can You File a Claim?
Data-breach victims often incur out-of-pocket expenses, fraudulent charges, credit-score damage, and lost time. State and federal laws allow consumers to seek monetary relief when companies fail to adequately safeguard personal information.
You may be eligible to join a class-action lawsuit if you:
- Received an official Tungsten Automation breach notice, or
- Can show your information was compromised in the May 2025 attack.
Compensation can cover credit-monitoring costs, unreimbursed fraud losses, time spent resolving identity issues, and more.
Protect Yourself Now
While legal investigations continue, take these steps today:
- Enroll in Experian IdentityWorks using the code provided in your notice letter.
- Place a fraud alert or credit freeze with Equifax, Experian, or TransUnion.
- Review your bank and credit-card statements weekly for suspicious charges.
- Watch for phishing attempts that reference Tungsten Automation or Kofax.
- Save all documentation — letters, emails, or screenshots — in case you join a lawsuit.
Timeline of Key Events
- May 20, 2025: Unauthorized access occurs.
- May 27, 2025: Breach detected by Tungsten Automation.
- Aug 22, 2025: Incident reported to California & Maine Attorneys General; notice letters mailed.
Frequently Asked Questions
How do I know if I’m part of the Tungsten Automation data breach?
You should have received a mailed notice dated August 22, 2025. If you moved recently or believe you were affected but did not get a letter, contact Tungsten Automation’s dedicated hotline listed in the notification or visit the company website for assistance.
What specific data did Tungsten Automation say was compromised?
The company’s filings list names, contact details, Social Security numbers, dates of birth, driver’s-license or state-ID numbers, addresses, and certain financial and medical information.
Is Tungsten Automation offering free credit monitoring?
Yes. Affected individuals can enroll in two years of Experian IdentityWorks at no cost. The enrollment code and instructions are included in the breach letter.
Can I sue Tungsten Automation for the Kofax data breach?
Possibly. Consumers whose personal information was exposed may qualify to join a class-action lawsuit seeking damages for fraud losses, time spent, and emotional distress. Consult a data-privacy attorney to evaluate your specific circumstances.
What deadlines apply to a Tungsten Automation breach claim?
Each state sets its own statute of limitations for privacy and negligence claims—often between one and four years from the date you knew or should have known about the breach. Acting promptly preserves your rights.
Next Steps
Think you qualify? Speak with a data-breach attorney as soon as possible. Gathering documents now—notice letters, proof of identity theft, and time-stamped screenshots—will strengthen your potential claim.