DataBreachLegalRights.com

The 11 data breach: your legal rights

Digital services provider 11 reported a data breach to Indiana authorities on January 8, 2026, stemming from an incident on October 7, 2025. This breach exposed sensitive personal information, including names, email addresses, and payment card details, creating significant risks for affected individuals who now have legal standing to explore their options.

Get a free case review

Your rights after this breach

  • To be told about the breach

    Indiana law requires a company that loses residents' personal information to notify them. 11 reported this breach to the Indiana Attorney General.

    Indiana data breach notification law

  • Limits on what you owe for fraud

    Account or card information is listed. Report unauthorized charges quickly; federal law caps how much you can be held responsible for, and the sooner you report, the lower the cap.

    Electronic Fund Transfer Act and Fair Credit Billing Act

  • To ask whether you can recover money

    If 11 did not take reasonable care of your information, you may have a claim for negligence or under Indiana law. An attorney can review it with you for free.

    Indiana common law and consumer protection statutes

Rights every American has after a breach

Free case review

Tell us you got the 11 notice. An attorney reviews it and tells you plainly whether you may have a claim.

  • Free, no obligation
  • No fee unless you recover
  • Reply within 24 hours

Got a Notification Letter? Find Out If You Qualify

Free review. No cost, no obligation.

Upload your breach letter (optional)

No attorney-client relationship is created by submitting this form. Attorney Advertising.

What 11 reported

Reported to
Indiana Attorney General
Date filed
January 8, 2026
People notified
Not stated
Cause in filing
Not stated

Information listed in the filing: Full Name, Email Address, Password or Credential Hash, Mailing Address, Phone Number, Purchase and Order History, Payment Card Information, Account Settings and Preferences.

11, a technology company operating in the digital services sector, formally reported a security incident to the Indiana Attorney General on January 8, 2026. This breach, which occurred on or about October 7, 2025, involved unauthorized access to its systems and has led to the compromise of personal data for an unknown number of individuals.

The compromised information includes a wide range of personal details. Specifically, the breach exposed individuals' Full Name, Email Address, Password or Credential Hash, Mailing Address, Phone Number, Purchase and Order History, Payment Card Information, and Account Settings and Preferences.

Exposure of this data creates immediate and long-term risks. Your Password or Credential Hash could be used in credential stuffing attacks on other online accounts if you reuse passwords. Your Email Address, Phone Number, and Purchase and Order History can be exploited for highly targeted phishing scams, while Payment Card Information is a direct pathway to financial fraud.

As a company handling vast amounts of consumer data, 11 had a legal obligation to implement robust security measures to protect this information. The occurrence of a data breach suggests that these reasonable security procedures may not have been adequately maintained, potentially failing to prevent unauthorized intrusion into their databases.

Receiving a data breach notification letter from 11 means your private information was compromised. This notification establishes your legal standing to understand your rights and seek redress. Under consumer privacy laws, victims do not always need to prove immediate financial loss; the increased risk of future identity theft and fraud can constitute legally recognized harm.

It is important to monitor your accounts and be vigilant for suspicious activity. You have legal rights under Indiana law regarding how companies must protect your data and what recourse you have when they fail. Exploring these rights can help you understand potential avenues for compensation.

If you received a data breach notification from 11, you may be entitled to pursue a claim. Our firm is currently investigating this incident and offers free case reviews to help you understand your legal options. There are no out-of-pocket costs or fees unless we successfully recover compensation on your behalf.

See the official filing

11 data breach questions

How many people were affected by the 11 data breach, and what was exposed?
The filing does not give a count of affected people and lists the following information as involved: Full Name, Email Address, Password or Credential Hash, Mailing Address, Phone Number, Purchase and Order History, Payment Card Information, Account Settings and Preferences. Your own letter is the best guide to what was exposed about you, since notices are usually tailored to each person.
Is the 11 data breach letter legit or a scam?
A notice from 11 in the mail matches the breach 11 reported to the Indiana Attorney General on January 8, 2026. Check that the company name and dates in your letter match that filing. A real notice of data security incident won't ask for your password, Social Security number or a payment — if it does, contact 11 through a phone number or website you find yourself.
Did 11 offer free credit monitoring?
Check your letter from 11. If free credit or identity monitoring is offered, the enrollment code and deadline are printed in the notice itself. Because financial or account details are listed in this filing, watch your bank and card statements closely as well. Signing up doesn't waive any legal rights you may have.
Is there a 11 data breach class action lawsuit?
Law firms often open an investigation after a breach notice like this one, and a class action lawsuit may follow. This page doesn't confirm that a lawsuit has been filed against 11. You usually don't have to join a class action to be included — if a settlement is reached, class members are notified and can file a claim.
What should I do after getting the 11 data breach notice?
Keep the letter and the envelope, and note the date it arrived. Freeze your credit with Equifax, Experian and TransUnion, change any passwords the notice mentions, and sign up for any free credit monitoring the letter offers. Then check whether you may have a claim.
Where can I see the official 11 breach notice?
11's report is published by the Indiana Attorney General: https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/security-breaches/#11-2026 Compare it with the letter you received to confirm the dates and details match.
Do I need a 11 data breach lawyer or attorney?
An attorney can read your notice and tell you whether a claim makes sense. A case review here is free, and data breach cases are usually handled on contingency, so there is no upfront cost.
Can I sue 11 over the data breach?
It depends on what was exposed, the law in Indiana and your own state, and whether you've been harmed. Most people take part through a class action rather than suing alone. Keep your notification letter — it's the proof that connects you to the breach.
How much could a 11 data breach settlement or claim be worth?
There is no set amount, and no 11 settlement is confirmed here. In past data breach settlements, payments depended on what data was exposed and on documented losses — fraud, out-of-pocket costs and time spent dealing with the breach. The filing lists Full Name, Email Address, Password or Credential Hash as involved. Keep receipts and records; they're what damages claims are built on.

Other breaches reported in Indiana

Attorney advertising. General information, not legal advice for your situation. This page reflects a public regulator filing; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.