Acumen Fiscal Agent Data Breach Lawsuit Investigation
Received an August 2026 breach notice from Acumen Fiscal Agent?
Dapeer Law, P.A. is investigating a potential class action against Acumen Fiscal Agent, LLC, an Arizona-based fiscal intermediary that processes payroll and vendor payments for self-directed care programs, on behalf of individuals whose personal and financial account information may have been exposed in the June 2026 cyber incident disclosed in August 2026.
Who may qualify
You may be eligible to participate in a class action if any of the following applies:
- You received a data breach notification letter from Acumen Fiscal Agent dated August 2026.
- Your letter offered enrollment in 12 months of free Cyberscout credit monitoring and identity theft protection (TransUnion, three-bureau) with a $1,000,000 identity theft insurance policy.
- You had payroll, banking, or payment information held by the company in its capacity as a fiscal intermediary and financial management services provider, whether as an employee, a caregiver, a vendor, or an employer of record.
- No proof of harm required to consult with counsel. You do not need to have already suffered identity theft to explore your legal options.
- Excluded: individuals who did not receive a breach notice and whose information was not involved in the incident.
Not sure if you qualify?
Send us your notice, we'll confirm your eligibility at no cost.
What happened
Acumen Fiscal Agent, LLC reports that it detected unauthorized access to its payroll environment on June 25, 2026. According to the company, an outside actor accessed files during a brief window that same day, and the intrusion was contained after discovery. A third-party cyber forensics firm was engaged to investigate, and the company states that the files involved contained employee, vendor payment, and employer reimbursement records.
The company completed a file-by-file review and, on July 24, 2026, determined which individuals had information in the accessed files. Written notices to affected individuals and regulators were issued on August 6, 2026, and the incident was posted by the Texas Attorney General on August 7, 2026. The notice reports 1,333 individuals in total, including 990 Texas residents and 343 Massachusetts residents, and states that the information involved may have included names, financial account numbers, bank routing numbers, and, for Texas notice recipients, credit or debit card numbers. The company states that Social Security numbers were not present in the accessed files. Affected individuals are offered 12 months of complimentary credit monitoring and identity theft protection through Cyberscout, a TransUnion company, including up to $1,000,000 in identity theft insurance.
Because the reported categories center on bank account and payment card data rather than Social Security numbers, the near-term risk profile skews toward unauthorized debits, payment card fraud, and targeted payroll or payment redirection scams. Individuals who work through a fiscal intermediary often have direct deposit details on file for recurring payments, which makes account monitoring and, where appropriate, replacing an affected account or card a practical first step. Dapeer Law is evaluating whether the security measures in place at the time were reasonable for an entity that holds banking credentials at scale.
What to do if you received a letter
Keep your notice letter
Do not discard it. Your letter contains the enrollment code for credit monitoring and is important evidence if you decide to participate in a lawsuit.
Enroll in the free 12-month credit monitoring
Enroll in the Cyberscout (TransUnion, three-bureau) monitoring offered in your letter at bfs.cyberscout.com/activate using the unique enrollment code in your notice, within 90 days of receipt. Accepting this benefit does not waive your right to pursue legal action.
Place a fraud alert or credit freeze
Contact Equifax, Experian, and TransUnion to place a fraud alert or freeze on your file. Request a free weekly credit report from AnnualCreditReport.com, and use the FTC's IdentityTheft.gov recovery guide. Because financial account and routing numbers were reported, review bank and credit card statements line by line for unfamiliar debits, and ask your bank about a new account number or card if anything looks wrong.
Speak with a data breach attorney
Consultations with Dapeer Law are free and confidential. We'll review your notice, explain your options under Texas, Massachusetts, and other state data breach and consumer protection laws, and advise whether you may be eligible to join a class action.
Submit your notice for a free review
Two minutes online. A licensed attorney reviews every submission.
Breach timeline
Compensation you may be entitled to
Out-of-pocket expenses
Credit freezes, identity restoration services, and other costs incurred responding to the breach.
Time spent monitoring
Hours spent reviewing accounts, disputing fraudulent charges, and dealing with identity theft issues.
Identity theft & fraud losses
Unreimbursed funds stolen from accounts, unauthorized credit lines, unauthorized bank debits, payment card fraud, or tax refund fraud tied to the breach.
Statutory damages
Certain state data breach and consumer protection statutes provide for fixed damages regardless of actual loss.
Injunctive relief
Court orders requiring Acumen Fiscal Agent to implement stronger data security practices going forward, including tighter access controls and monitoring around the payroll environment that holds bank account and payment card information.
Compensation categories depend on applicable state law, the types of data exposed, and documented losses. No recovery is guaranteed.
Common questions
I received a data breach letter from Acumen Fiscal Agent. What should I do? +
Keep your letter, it contains the enrollment code you need. Activate the 12 months of free Cyberscout credit monitoring at bfs.cyberscout.com/activate within 90 days of the date on your letter, then review your bank and credit card statements for transactions you do not recognize. Because financial account and routing numbers were reported, consider asking your bank about a replacement account number or card, and report any suspicious activity to your financial institution and law enforcement promptly. You can also place a fraud alert or a security freeze on your credit files at no cost.
Am I eligible to join a class action against Acumen Fiscal Agent? +
Individuals who received a written notice from Acumen Fiscal Agent dated on or about August 6, 2026 are the most likely candidates. That includes employees, caregivers, vendors, and employers of record whose payroll or payment information was in the accessed files. Eligibility can also turn on your state of residence, the categories of data involved in your particular letter, and whether you can document out-of-pocket losses, unauthorized charges, or time spent resolving fraud.
How much money could I receive from a class action lawsuit? +
Data breach class action recoveries vary significantly. Settlements typically range from a few hundred dollars for basic out-of-pocket losses to several thousand dollars for documented identity theft, with class size, damages, and negotiation all affecting the final amount. No payout is guaranteed, and this investigation has not yet resulted in a settlement.
What personal information was exposed in the breach? +
The notice states that the accessed files may have included your name, financial account number, and bank routing number, and that credit or debit card numbers were involved for some individuals notified in Texas. The company states that Social Security numbers were not present in the accessed files. Categories vary by individual, so check your own letter for the specific data listed for you.
Did Acumen Fiscal Agent offer free credit monitoring? +
Yes. The company is providing 12 months of complimentary credit monitoring and identity theft protection through Cyberscout, a TransUnion company, with up to $1,000,000 in identity theft insurance. Enroll at bfs.cyberscout.com/activate using the unique code in your letter, within 90 days of receipt. Enrolling does not waive your right to pursue a claim.
How many people were affected by the Acumen Fiscal Agent breach? +
The company has reported 1,333 individuals in total, made up of 990 Texas residents and 343 Massachusetts residents in the state filings reviewed so far. Additional states may report their own counts, and this page will be updated as more filings become public.
Is there a deadline to take legal action? +
Yes. Statutes of limitations for data breach claims vary by state and legal theory, typically ranging from one to six years. Waiting can permanently bar your claim. Contact us as soon as possible for a free evaluation.
How do I get a copy of the official breach notice? +
The written notice was filed with state regulators, including the Massachusetts Attorney General, and the incident was posted by the Texas Attorney General. You can download the Massachusetts Attorney General filing using the link in the sources section of this page. If you cannot locate your letter, Dapeer Law can help you request a copy during a free consultation.
Sources & references
- Official breach notice filing · Massachusetts Attorney General, Acumen Fiscal Agent breach notification filing (PDF)
- Secondary regulator posting · Texas Attorney General, Data Breach Reports (posted August 7, 2026)
- Company · Acumen Fiscal Agent, LLC (acumenfiscalagent.com)
- Credit bureau freezes · Equifax · Experian · TransUnion
- Free weekly credit reports · AnnualCreditReport.com
- Identity theft recovery guide · FTC IdentityTheft.gov
Don't let the deadline decide for you. Submit your claim today.
You only have a limited window to act. Our team will review your notice, explain your options, and tell you whether you may be eligible to recover compensation, at no cost to you.
