Your Answers

Frequently

asked questions.

If your data was exposed in a breach, you probably have questions. These are the ones we hear most often — answered clearly, without the legalese.

About Data Breaches

What is a data breach?

A data breach occurs when unauthorized individuals gain access to networks and systems that an entity is responsible for protecting. This can happen through cyberattacks, system vulnerabilities, or employee error.

During a data breach, the unauthorized actors may target and gain access to sensitive information, including your name, contact information, Social Security number, financial account details, medical records, passwords, or other sensitive data stored by the breached entity.
How do I know if I was affected?

Companies that experience a data breach are generally required by law to notify affected individuals. If you received a letter or email from a company informing you of a breach, you were likely affected.

You can also search our active breach investigations to see if we are investigating a breach involving a company you have done business with.
What should I do right after receiving a breach notice?

Keep the notification — it’s evidence that you were affected and when you were notified. Change passwords for any accounts associated with the breached company, and monitor your financial accounts and credit reports for unusual activity.

You may also want to place a fraud alert or credit freeze with the major credit bureaus. And consider whether you want to explore your legal options — there is no cost to find out.
Is my information actually at risk if it was exposed?

When personal data is exposed, it creates ongoing risk. Information like Social Security numbers, financial account details, or medical records can be misused long after a breach — sometimes years later.

The harm doesn’t have to be immediate or visible for you to have legal options. The exposure itself, and the risk it creates, may be sufficient basis for a claim.

Your Rights

Do I have legal rights after a data breach?

Federal and state laws often impose obligations on companies to protect your personal information. When they fail to do so, you may have the right to pursue legal action.

The specific rights available to you depend on the nature of the breach, what data was exposed, and the state you live in. Our Know Your Rights page covers this in more detail.
What is a class action lawsuit?

A class action is a type of lawsuit where a large group of similarly situated individuals have a similar claim against the same defendant arising from a common harm. Rather than each person filing an individual lawsuit, one or more representatives of the proposed class bring the lawsuit on behalf of other class members.

Class actions permit individuals to collectively pursue claims that might be too small to litigate alone. In a data breach class action, the class representative often seeks to recover on behalf of all others impacted by the same data breach. If the case settles or if the class representative succeeds, other class members may be entitled to share in the recovery.
Does it matter what state I live in?

State law can affect what rights are available to you and how they can be enforced. Some states have stronger data privacy protections than others. However, federal law also provides protections that apply regardless of where you live.

When you reach out to us, we’ll evaluate your situation in light of the laws that apply to you specifically.

The Legal Process

How long does a data breach case take?

Data breach cases — particularly class actions — can take anywhere from one to several years to resolve. The timeline depends on the complexity of the case, the number of people involved, and whether the matter settles or proceeds to trial.

We keep clients informed throughout the process. Most of the work happens on our end — your involvement is typically limited to the initial intake and, in some cases, responding to questions along the way.
Is there a deadline to file?

Yes. Legal claims are subject to deadlines called statutes of limitations, which provide a cutoff for when you may be able to bring a case. These deadlines vary by state and by the type of claim.

The sooner you reach out, the better. If you’ve received a breach notification, don’t wait to find out whether you have options.
What if I already accepted a settlement offer from the company?

It depends on what you signed. Some settlement offers include a release of claims, which may limit your ability to pursue further legal action. Others are simply credit monitoring offers that may not affect your rights.

If you’ve received or accepted something from the company that experienced the breach, reach out and we can help you understand what it means for your options.

Working With Us

What does it cost to get help?
What happens after I submit my information?

Your information goes to the Zimmerman Reed data breach team, who will evaluate whether your situation may qualify for the investigation you’ve inquired about. If it does, the process to move forward can begin right away.

You won’t be left waiting. We’ll be in touch with next steps.
Who is Zimmerman Reed?

Zimmerman Reed is a nationally recognized plaintiff firm founded in 1983, with a dedicated data privacy and breach practice. We have served as lead or co-lead counsel in some of the largest data breach cases in the country, including the Change Healthcare MDL and the MOVEit MDL.

YourBreachRights.com is a free resource provided by Zimmerman Reed. Learn more about the firm.

Still have questions?
We can help.

Search active breach investigations to see if your situation is one we’re already looking into.

Find a Breach

Frequently

Still have questions?We can help.

Still have questions?
We can help.