IMA Diligence Services, LLC has notified an individual that their personal information may have been exposed after an unauthorized actor gained access to a legacy file server between December 8, 2025 and December 16, 2025. The server was managed by a third party and had already been decommissioned by the time the company discovered files on it were inaccessible. IMA Diligence describes this as a case of hacking or system intrusion, and says it brought in outside cybersecurity specialists and notified law enforcement once the incident was discovered on December 16, 2025.
The letter is addressed to a specific individual, and IMA Diligence has not stated a total number of people affected in the portion of the notice available to us. The company says it conducted a detailed review of the affected files to identify what information was involved and who needed to be notified before sending this letter.
What information was exposed?
- Your name
- Additional specific data categories were referenced in the original letter, but that portion of the text was not included in the copy we reviewed — if you received the full letter, check the section right after your name for the complete list
As a precaution, IMA Diligence is offering twelve months of complimentary credit monitoring and identity restoration services through Cyberscout, a TransUnion company, at no cost. You can enroll at https://bfs.cyberscout.com/activate using the activation code included in your letter, and enrollment must be completed within 90 days of the letter’s date (May 29, 2026). The company notes it cannot enroll you automatically, so you’ll need to sign up yourself.
What should you do now?
- Enroll in the free 12-month credit monitoring and identity restoration service offered by IMA Diligence before the 90-day deadline, using the activation code from your letter.
- Review the full letter carefully for the exact list of data types exposed, since that detail wasn’t available in the version we reviewed — this affects how seriously to treat the exposure.
- Check your bank and credit card statements regularly for unfamiliar charges over the next 12 to 24 months, as the company itself recommends.
- Order a free credit report from each of the three major bureaus at annualcreditreport.com and look for accounts or inquiries you don’t recognize.
- Consider placing a fraud alert or credit freeze with Equifax, Experian, and TransUnion, both of which are free under federal law.
- For broader, ongoing protection, consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere.
- If you notice signs of identity theft, file a report with the FTC at identitytheft.gov and consider filing a police report.
If you have questions, IMA Diligence Services, LLC can be reached at 1-844-593-7939 (Monday through Friday, 8:00 am to 8:00 pm Eastern Time) or by mail at 430 East Douglas Avenue, Suite 400, Wichita, KS 67202.