The unauthorized intrusion occurred between August 8 and August 12, 2026. By August 21, the ransomware group publicly claimed to possess stolen CAZ data, prompting an internal review that confirmed the exposure of personal files by August 25. While the firm has identified 4,237 affected individuals across Texas and Massachusetts, the total number of victims nationwide remains unconfirmed.

Potentially compromised data includes Social Security numbers, passport information, driver's license details, and financial account records. Although CAZ Investments LP has stated it is unaware of any current misuse of this information, the breach leaves victims at a heightened risk for identity theft and fraud. Edelson Lechtzin LLP is offering free case evaluations to determine if affected parties are eligible for compensation regarding lost time, out-of-pocket expenses, or privacy violations. Impacted individuals are urged to enroll in the complimentary identity protection services offered by CAZ before the December 23, 2026, deadline.