Midkiff, Muncie & Ross PC Provides Notice Following Data Security Incident

Midkiff, Muncie & Ross PC ("MMR") recently notified potentially impacted individuals of a data security incident that may have involved their personal information. On December 8, 2025, MMR first became aware of unusual activity that disrupted access to certain IT systems within its network. After detecting and promptly containing the incident, MMR launched an investigation with the support of external cybersecurity experts to learn more about the scope of the incident and determine if any data may have been affected. Through that investigation, MMR learned that an unknown actor potentially acquired certain files from its network. In order to determine whether personal information was acquired and, if so, identify the subject individuals, MMR then undertook a comprehensive review of those files. On August 18, 2026, it confirmed the scope of the impact and secured information sufficient to effectuate notice. The personal information that may have been involved in the incident varied by individual but may have included the following: names, Social Security numbers, driver's license or state identification numbers, passport numbers, military identification numbers, other government identification numbers, financial account information, health insurance information, and medical information. As soon as the incident was discovered, MMR took the steps referenced above. It also implemented several measures to reduce the risk of similar future incidents. On September 10, 2026, MMR mailed notice of this incident to potentially impacted individuals for which it had identifiable address information. The notice provided information about the incident and resources that potentially impacted individuals could utilize to protect their information. For eligible individuals, this also included the opportunity to enroll in complimentary identity protection services through IDX, a data breach and recovery services expert. MMR has established a toll-free call center to answer questions about the incident. The call center is available Monday through Friday from 9:00 a.m. to 9:00 p.m. Eastern Time (excluding major U.S. holidays) and can be reached at 1-866-200-0898. All affected individuals may qualify for complimentary identity protection services through IDX. Individuals who have not received a notification letter must obtain verification of eligibility though the call center to enroll in services. The deadline to enroll in services is December 10, 2026.