Williams Hart & Boundas LLP (the “Firm”) is providing this notice to inform individuals whose personal information may have been affected by a security incident involving unauthorized network access to the Firm’s computer systems. This notice is being provided out of an abundance of caution. To date the Firm has found no direct evidence that any sensitive personal information was actually acquired by the unauthorized persons and has received no reports that any personal information has been misused. The Firm restored network systems from validated backups, and all of the Firm’s systems are now operational to help Firm lawyers deliver results for our clients.
What Happened. On January 16, 2026, the Firm discovered that an unauthorized party gained access to certain internal network resources and encrypted files on several of the Firm’s network drives. The Firm immediately launched an investigation with the assistance of a cybersecurity firm. The investigation determined that the unauthorized access began on or about January 12, 2026. All affected servers were taken offline and the threat was contained.
What Information Was Potentially Involved. The Firm’s network files include information maintained in connection with the Firm’s legal practice, some of which may include personal information such as names, addresses, dates of birth, Social Security numbers, driver’s license numbers, financial account information, medical records, and other health and claims-related information.
What the Firm Has Done. The Firm reported the incident to law enforcement and engaged a cybersecurity firm to investigate and remediate the incident. The Firm’s investigation found no direct evidence that personal information was downloaded or removed from the Firm’s systems, and the Firm has received no reports that any personal information has been misused. The Firm successfully restored systems from validated backups and has implemented enhanced security measures, including upgraded firewall protections, improved threat detection capabilities, and strengthened access controls and authentication. The Firm is also revising its information security policies and incident response procedures.
What You Can Do. The Firm recommends that potentially affected individuals take the following precautionary steps:
Monitor your financial accounts, credit reports, and explanation-of-benefits statements for any unusual or unauthorized activity.
Obtain a free copy of your credit report from each of the three nationwide credit reporting agencies by visiting www.annualcreditreport.com or calling 1-877-322-8228.
Consider placing a fraud alert or credit freeze on your credit files by contacting Equifax (1-800-525-6285), Experian (1-888-397-3742), or TransUnion (1-800-680-7289).
Report any suspected identity theft to local law enforcement or the Federal Trade Commission at www.identitytheft.gov.
For More Information. If you have any questions about this incident or would like additional information, please contact:
Ron Isbell, IT Director
Williams Hart & Boundas, LLP
8441 Gulf Fwy #600
Houston, TX 77017
(713) 230-2323
risbell@whlaw.com
Sean McCarthy
Cesar Tavares
Feb 21, 2025
