The security incident occurred on or around June 22, 2026, though Opportune LLP did not begin notifying affected individuals until September. While the breach compromised data related to royalty interest payments linked to Phillips 66, the energy company's internal systems remained secure; the exposed information was held by Opportune as part of its outsourced accounting operations. In addition to the Texas residents, the breach impacted individuals across Massachusetts and Vermont, with the total number of victims nationwide still under assessment.

Edelson Lechtzin LLP has launched an investigation into the firm’s cybersecurity practices to determine if the breach resulted from a failure to implement reasonable safeguards. The sensitivity of the stolen data—specifically Social Security numbers and banking information—leaves victims at a heightened, long-term risk of identity theft, tax fraud, and sophisticated phishing campaigns. The law firm is currently offering free case evaluations to those affected, advising individuals to enroll in credit monitoring services immediately and to place security freezes on their credit reports with major bureaus.