Castaglia, LLP Data Breach Lawsuit Investigation, April 2026 Notices
Received an April 2026 breach notice from Castaglia, LLP?
Dapeer Law, P.A. is investigating a potential class action against Castaglia, LLP, a New York-based law firm, on behalf of clients and other individuals whose personal information may have been exposed in the firm's February to March 2026 network intrusion.
Who may qualify
You may be eligible to participate in a class action if any of the following applies:
- You received a data breach notification letter from Castaglia, LLP dated April 2026.
- You were offered, or you enrolled in, the complimentary Kroll credit-monitoring and identity-theft protection services referenced in the notice.
- You had personal or financial information held by Castaglia, LLP in its capacity as your law firm or as outside counsel handling a matter involving you.
- No proof of harm required to consult with counsel. You do not need to have already suffered identity theft to explore your legal options.
- Excluded: individuals who did not receive a breach notice and whose information was not involved in the incident.
Not sure if you qualify?
Send us your notice, we'll confirm your eligibility at no cost.
What happened
According to the firm's investigation, an unauthorized party accessed portions of Castaglia, LLP's computer network between February 28 and March 8, 2026, and copied certain files. Castaglia contained the activity, alerted law enforcement, and engaged a forensic firm to determine what data was involved. On March 26, 2026, that review confirmed the accessed files contained personal information belonging to consumers.
Castaglia filed a sample notice with the Maine Attorney General's Data Breach Notifications portal and began mailing letters to affected individuals on April 28, 2026, roughly one month after the data review concluded. The notice states that compromised files included full names along with Social Security numbers, driver's license or state identification numbers, and financial account numbers, and that the firm is offering complimentary credit-monitoring and identity-theft protection through Kroll. The total number of individuals affected has not been publicly disclosed, the Maine filing reports one Maine resident.
Because Castaglia, LLP is a law firm, the data at issue may include information clients shared in confidence in connection with legal representation, including matter-related financial details. Combinations of name, Social Security number, driver's license number, and financial account number are among the highest-risk data categories for identity theft, new-account fraud, and tax fraud.
What to do if you received a letter
Keep your notice letter
Do not discard it. Your letter contains the activation code for credit monitoring and is important evidence if you decide to participate in a lawsuit.
Activate the free Kroll credit monitoring and identity-theft protection
Use the activation instructions included in your letter to enroll with Kroll before the deadline printed in the notice. Accepting this benefit does not waive your right to pursue legal action.
Place a fraud alert or credit freeze
Contact Equifax, Experian, and TransUnion to place a fraud alert or freeze on your file. Request a free weekly credit report from AnnualCreditReport.com, and use the FTC's identity theft recovery guide. Because financial account numbers were exposed, watch your bank and brokerage statements for unfamiliar transactions and consider asking your bank to issue replacement cards or new account numbers.
Speak with a data breach attorney
Consultations with Dapeer Law are free and confidential. We'll review your notice, explain your options under state breach-notification statutes and common-law negligence theories, and advise whether you may be eligible to join a class action.
Submit your notice for a free review
Two minutes online. A licensed attorney reviews every submission.
Breach timeline
Compensation you may be entitled to
Out-of-pocket expenses
Credit freezes, identity restoration services, and other costs incurred responding to the breach.
Time spent monitoring
Hours spent reviewing accounts, disputing fraudulent charges, and dealing with identity theft issues.
Identity theft & fraud losses
Unreimbursed funds stolen from accounts, unauthorized credit lines opened in your name, fraudulent loan applications, or tax refund fraud tied to the breach.
Statutory damages
Certain state data breach and consumer protection statutes provide for fixed damages regardless of actual loss.
Injunctive relief
Court orders requiring Castaglia, LLP to implement stronger data security practices and safeguards consistent with the duty of confidentiality lawyers owe their clients going forward.
Compensation categories depend on applicable state law, the types of data exposed, and documented losses. No recovery is guaranteed.
Common questions
I received a data breach letter from Castaglia, LLP. What should I do? +
Keep the letter, activate the complimentary Kroll credit-monitoring and identity-theft protection using the code in your letter, place a fraud alert or freeze with Equifax, Experian, and TransUnion, and watch your financial accounts for unfamiliar activity. Because Social Security numbers, driver's license numbers, and financial account numbers are reported as exposed, also consider asking your bank to reissue cards or account numbers. Then contact Dapeer Law for a free consultation.
Am I eligible to join a class action against Castaglia, LLP? +
Notice recipients are the most likely candidates. Eligibility depends on factors such as your state of residence, the categories of data exposed, whether you have documented out-of-pocket losses or fraud, and the strength of state consumer protection and breach-notification statutes that apply to you. Dapeer Law will evaluate your specific situation at no cost.
How much money could I receive from a class action lawsuit? +
Data breach class action recoveries vary significantly. Settlements typically range from a few hundred dollars for basic out-of-pocket losses to several thousand dollars for documented identity theft, with class size, damages, and negotiation all affecting the final amount. No payout is guaranteed, and this investigation has not yet resulted in a settlement.
What personal information was exposed in the breach? +
The Maine Attorney General filing states that the compromised files included full name in combination with Social Security number, driver's license or state identification number, and financial account number. The exact categories that apply to your record may differ, check the data elements listed in your individual letter.
Did Castaglia, LLP offer free credit monitoring? +
Yes. The notice instructs recipients to enroll in complimentary credit-monitoring and identity-theft protection services through Kroll. The activation code and enrollment deadline appear in your letter. Enrolling does not waive your right to participate in a class action.
How many people were affected by the Castaglia, LLP breach? +
The total nationwide headcount has not been publicly disclosed. The Maine Attorney General filing reports one Maine resident, but Castaglia is likely required to file in additional states as well. This page will be updated as more information becomes available.
Is there a deadline to take legal action? +
Yes. Statutes of limitations for data breach claims vary by state and legal theory, typically ranging from one to six years. Waiting can permanently bar your claim. Contact us as soon as possible for a free evaluation.
How do I get a copy of the official breach notice? +
The sample notice is on file with the Maine Attorney General's Data Breach Notifications portal, linked in the Sources section below. If you cannot locate or download a copy, Dapeer Law can help you obtain one during your free consultation.
Sources & references
- Official breach notice filing · Maine Attorney General, Data Breach Notifications Portal (Castaglia, LLP filing)
- Defendant · Castaglia, LLP (castigliallp.com)
- Credit bureau freezes · Equifax · Experian · TransUnion
- Free weekly credit reports · AnnualCreditReport.com
- Identity theft recovery guide · FTC consumer identity theft guide
Don't let the deadline decide for you. Submit your claim today.
You only have a limited window to act. Our team will review your notice, explain your options, and tell you whether you may be eligible to recover compensation, at no cost to you.
