Cyrus D. Mehta & Partners Data Breach Lawsuit Investigation
Immigration-law firm Cyrus D. Mehta & Partners is notifying clients of a data security incident that exposed sensitive personal information. If you received a breach letter, you can take immediate steps to protect yourself and explore legal options through our free case evaluation.
Key Facts About the Breach
Discovery of suspicious activity: May 11, 2025
Consumer notification mailed: December 31, 2025
Reported to Vermont Attorney General: February 23, 2026
Incident involved unauthorized access and data exfiltration from certain firm systems.
What Information Was Involved?
The firm’s investigation determined that the following data elements may have been removed by the unauthorized party:
Social Security number
Address
Date of birth
Demographic information
Passport or other government identification numbers
Additional legally protected identifiers
How Cyrus D. Mehta & Partners Responded
Cyrus D. Mehta & Partners engaged cybersecurity counsel and third-party forensic specialists, reset all account passwords, severed the intruder’s access, and implemented stronger multi-factor authentication across its network.
To help impacted individuals, the firm is providing complimentary single-bureau credit monitoring, credit report, and credit score services. Enrollment must be completed online within 90 days of the letter date.
Steps You Can Take Now
Visit bfs.cyberscout.com/activate and enter your unique code to activate credit monitoring.
Review the “Recommended Steps” document enclosed with your notice for additional protective measures.
Save copies of all correspondence and monitor your accounts for unfamiliar activity.
Complete our secure form to learn whether you can participate in the pending lawsuit investigation.
Potential Legal Claims
Data privacy laws require companies to safeguard personal information and provide timely breach notifications. Consumers whose information was compromised may have claims for statutory damages, credit-monitoring costs, and other losses. Our legal team is investigating potential class-action litigation against the firm. Participation is risk-free and no out-of-pocket fees are involved.
Company Overview
Website: cyrusmehta.com
Headquarters: One Battery Park Plaza, 9th Floor, New York, NY, USA
Industry: Legal Services
Year Founded: 1993
Sources
Impacted Entities
Frequently Asked Questions
I received a data breach letter from Cyrus D. Mehta & Partners — what should I do?
Enroll in the free credit monitoring within 90 days, follow the recommended steps outlined in your letter, and consider speaking with a data-breach attorney.
How do I submit a claim related to the Cyrus D. Mehta & Partners data breach?
Use our online form for a no-cost case review. An attorney will contact you regarding eligibility once litigation is filed.
What information did the Cyrus D. Mehta & Partners breach expose?
Potentially exposed data includes Social Security numbers, addresses, dates of birth, passport or other government ID numbers, demographic details, and other protected identifiers.
Did Cyrus D. Mehta & Partners offer credit monitoring, and for how long?
Yes. The firm is offering complimentary single-bureau credit monitoring, credit report, and credit score services. You must enroll online within 90 days of the letter.
How many people were affected by the Cyrus D. Mehta & Partners breach?
The total number of impacted individuals was not disclosed in the Vermont filing.
How can I get the official breach notice (PDF) for Cyrus D. Mehta & Partners?
Download the notice directly from the Vermont Attorney General’s website using the button near the top of this article.
Attorney Advertising. Prior results do not guarantee a similar outcome.
