Tungsten Automation Data Breach Lawsuit Investigation
Were you alerted that your personal information may have been exposed in Tungsten Automation’s recent cyber-attack? More than 5,500 people now face potential identity-theft risks after the software developer confirmed a network intrusion. Find out how to secure your data and explore whether you qualify for financial compensation below.
What Happened?
On May 27, 2025, Tungsten Automation—which many know by its former name, Kofax, Inc.—detected suspicious activity inside its internal IT network. An immediate investigation was launched to contain the incident and assess any data exposure.
The company’s review concluded that an unauthorized party could have accessed files containing sensitive personal identifiable information (PII). While the exact data types for each person have not been publicly disclosed, California’s reporting laws indicate that exposed information may include:
- Full name
- Social Security number
- Driver’s license or passport number
- Financial account or card numbers with security codes
- Medical or health-insurance details
- Biometric or genetic data
Who Is Affected?
Tungsten Automation’s notice to state regulators lists approximately 5,500 individuals whose data was implicated. If you received a breach letter dated August 22, 2025—or if you have used Tungsten Automation products or services through your employer—you could be among the impacted group.
What Is Tungsten Automation Doing?
- Notifying all identified victims by mail or email.
- Providing complimentary credit-monitoring and identity-theft detection services.
- Offering a personalized list of exactly what data elements were compromised for each person.
Your Immediate Action Plan
Even with credit monitoring in place, experts recommend taking the following steps right away:
- Activate the free credit-monitoring codes as soon as possible.
- Place fraud alerts or security freezes with the major credit bureaus.
- Review bank and credit-card statements for unfamiliar activity.
- Change passwords on any accounts that share credentials with Tungsten Automation services.
- Document any suspicious transactions; keep copies of correspondence.
Can You File a Lawsuit Against Tungsten Automation?
Under consumer-protection and data-privacy laws, companies that fail to adequately safeguard personal information may owe monetary damages to victims. Potential legal claims include negligence, breach of implied contract, and violations of state data-breach statutes.
By joining a class-action investigation, you could:
- Recover out-of-pocket costs for credit services and identity theft losses.
- Seek statutory damages provided by certain state laws.
- Push Tungsten Automation to adopt stronger cybersecurity measures.
Consult an experienced data-breach attorney to determine your eligibility and next steps.
Download the Official Notice
Download Official Breach Notice (PDF)
Timeline of Key Events
- May 27, 2025: Suspicious network activity detected.
- May–August 2025: Internal forensic investigation and data review.
- August 22, 2025: Written notices sent to impacted individuals.
- August 25, 2025: Breach publicly posted with state regulators.
About Tungsten Automation
Founded in 1985 and headquartered in Irvine, California, Tungsten Automation develops workflow-automation solutions that streamline data-intensive business processes. The company employs more than 2,200 professionals operating across 32 countries.
Frequently Asked Questions
How do I know if I’m part of the Tungsten Automation data breach?
You should receive a mailed or emailed notice from Tungsten Automation if your information was involved. If you believe you used the company’s software indirectly through an employer, contact Tungsten Automation’s dedicated hotline listed in the notice.
What personal information was exposed in the Tungsten Automation cyber attack?
The company has not yet published a public list, but California law suggests the breach could include names, Social Security numbers, government ID numbers, financial data, medical data, or biometrics. Check your individual notice for specifics.
Is Tungsten Automation offering free credit monitoring?
Yes. Impacted consumers are being offered complimentary credit-monitoring and identity-theft services. Activation instructions are included in the breach letter.
Can I sue Tungsten Automation for the data breach?
Possibly. Victims may be entitled to compensation for negligence or statutory violations. Speaking with a data-breach attorney can clarify your legal rights.
How long do I have to take legal action against Tungsten Automation?
Statutes of limitations vary by state, but many range from one to four years after discovering the breach. Acting quickly preserves evidence and strengthens any potential claim.
Attorney Advertising. Prior results do not guarantee a similar outcome.