Almeida Law Group is investigating a data breach at Indico Data Solutions. The breach occurred on May 5th–7th, 2026 and was discovered on May 7th, 2026. If you were affected, contact Almeida Law Group.
About Indico Data Solutions
Indico Data Solutions is a Boston, Massachusetts-based AI software company founded in 2014. Its core product is an AI-driven platform that automates workflows for document-intensive industries, with a primary focus on the insurance sector. The company processes unstructured data — such as emails, PDFs, and contracts — on behalf of corporate clients including MetLife, Aviva, and Cushman & Wakefield. Because Indico operates as a third-party data processing vendor, individuals affected by this breach may not have had any direct relationship with the company; their information was held by Indico on behalf of its corporate customers.
What Happened?
Indico Data Solutions was listed in a Texas Attorney General data security breach report (record BR-0005237). According to that filing and the company’s own notification letter filed with the Nebraska Attorney General, on May 7th, 2026 Indico determined it had suffered a cybersecurity incident involving potential unauthorized access to online repositories containing corporate customer information. The company engaged external cybersecurity specialists, secured its environment, and worked with affected corporate customers to identify impacted individuals. For certain customers, that identification process was completed on June 17th, 2026. Notification letters were mailed to affected individuals on July 16th, 2026.
The Texas AG filing lists names, addresses, medical information, health insurance information, and date of birth as the data types involved. The Nebraska AG notification letter specifies names, addresses, and Social Security numbers. The difference likely reflects distinct customer datasets affected across the incident. Indico is offering 12 months of free single-bureau credit monitoring through Cyberscout, a TransUnion company. No ransomware group or specific threat actor has been publicly linked to this incident. ClassAction.org has listed this breach on its data breach lawsuits tracking page and notes that attorney investigations appear to be underway, though no confirmed class action lawsuit had been filed as of August 10th, 2026.
Key Facts at a Glance
- Company or Organization: Indico Data Solutions
- Industry: AI / Enterprise Software — Intelligent Document Processing for Insurance and Financial Services
- Location: Boston, Massachusetts
- Incident type: Unauthorized access to online repositories
- Date of breach: May 5th, 2026 – May 7th, 2026
- Date breach discovered: May 7th, 2026
- Date of consumer notification: July 16th, 2026
- Identity theft protection offered: 12 months of free single-bureau credit monitoring through Cyberscout (TransUnion)
- Litigation status: Listed on ClassAction.org breach tracker; attorney investigations noted; no confirmed class action filed as of August 10th, 2026
- Source: Texas Attorney General data security breach report (BR-0005237) — https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage#BR-0005237; Nebraska AG notification letter — https://www.nebraska.gov/ago/data-breach/documents/4d7f4105-7eae-4d90-b585-ce3a5a77ae4b.pdf; ClassAction.org — https://www.classaction.org/data-breach-lawsuits
What Should You Do?
If you received a notice from Indico Data Solutions, enroll in the free credit monitoring through Cyberscout before any deadline stated in your letter. Because this breach involved Social Security numbers, medical information, and health insurance information, you should also place a fraud alert or credit freeze with each of the three major credit bureaus — Equifax, Experian, and TransUnion. Review your credit reports at AnnualCreditReport.com for any accounts or inquiries you do not recognize. Monitor your Explanation of Benefits statements from your health insurer and review your medical records for any services you did not receive, since health insurance information was among the compromised data types. If you identify suspicious activity, report it at IdentityTheft.gov for step-by-step recovery guidance.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
