DataBreachLawCenter.com
MonitoringIndiana AG filing · May 8, 2026

New Congol LLC Data Breach Exposes Personal Employee Information

New Congol LLC, also known as New Congoleum, recently reported a data breach impacting personal information, including Social Security Numbers and banking details. If you received a notification letter, your sensitive data may have been exposed, creating risks for identity theft and financial fraud. Understanding the details of this breach is crucial to protect your legal rights and personal security.

Received a New Congol LLC dba New Congoleum notification letter? Find out in minutes if you qualify for compensation.

Free case review
State
Indiana
Breach date
March 24, 2026
Reported
May 8, 2026

What may have been exposed

  • Full Name
  • Social Security Number
  • Date of Birth
  • Mailing Address
  • Wage and Compensation Information
  • Tax Return Information
  • Direct Deposit Account Details
  • Employee ID Number

New Congol LLC, operating as New Congoleum, recently experienced a cybersecurity incident that led to the exposure of sensitive personal information. The company reported this breach on May 8, 2026, confirming that the incident occurred on or around March 24, 2026. If you received a data breach notification letter from New Congoleum, it means your private data was likely compromised.

According to the information available, the exposed data types include Full Name, Social Security Number, Date of Birth, Mailing Address, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, and Employee ID Number. The compromise of these specific data categories, particularly Social Security Numbers and direct deposit information, creates significant risks. This blend of information can be used for identity theft, fraudulent tax filings, and unauthorized access to your financial accounts.

New Congol LLC, as a business operating in Indiana, has legal obligations to protect the sensitive personal data it collects and stores. Indiana law requires companies to maintain reasonable security measures to safeguard personal information. A breach of this nature raises questions about whether the necessary protections were adequately in place to prevent unauthorized access to deeply personal employee records.

Receiving an official notification letter from New Congoleum serves as formal notice that your private information was involved in this security incident. This notice is important because it establishes your potential legal standing to pursue recourse. You do not necessarily need to have experienced direct financial loss to understand your legal options and potential rights in such matters.

If you have received a data breach notification from New Congoleum, it is advisable to carefully review its contents. Understanding what information was compromised and the potential implications is the first step. You may have legal rights that can be explored without any upfront cost to you. We are currently monitoring the investigation into this breach and are prepared to help affected individuals understand their situation.

Received the New Congol LLC dba New Congoleum notification letter? The New Congol LLC dba New Congoleum case file tracks this filing.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Guard against tax fraud

    File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.

  • Watch your financial accounts

    Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases