Lonich Patton Ehrlich Policastri, PC (LPEP), a San Jose law firm, has notified clients that it discovered unauthorized access to certain firm systems containing client information on November 16, 2025. The firm’s investigation, conducted with outside cybersecurity specialists, determined that an unauthorized party may have accessed or acquired personal information sometime between November 15 and 16, 2025. The letter describes this as a case of hacking or system intrusion, and the firm says it has since secured the affected systems, engaged independent security experts, and notified law enforcement where appropriate.
The notice was sent to clients of the firm whose information was stored in the affected systems. Because LPEP is a law practice, the exposed records may include sensitive case materials in addition to standard personal identifiers. The letter does not state a total number of people affected.
What information was exposed?
- Client names and contact information
- Case file contents, including written communications, financial information, notes, court filings, and expert reports
- Social Security number
- Driver’s license or state identification number
Because Social Security numbers and state ID numbers were involved, LPEP is offering 12 months of complimentary identity-theft protection and credit-monitoring services at no cost to affected clients. The firm states that enrollment instructions were attached to its notification email in PDF form; if you did not receive or cannot locate that attachment, contact the firm directly using the information below to get the enrollment details and any deadline.
What should you do now?
- Enroll in the complimentary identity-theft protection and credit-monitoring service LPEP is offering, using the instructions provided in the attached PDF
- Place a fraud alert or credit freeze with each of the three credit bureaus, since your Social Security number and ID number may have been exposed
- Review your credit reports carefully for any accounts or inquiries you don’t recognize
- Watch your bank and credit card statements closely for unusual activity over the coming months, not just the next few weeks
- Consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere or is used to open new accounts
- Be cautious of unexpected calls, texts, or emails referencing your legal case, as exposed case files could be used to make phishing attempts sound convincing
If you have questions, LPEP can be reached through Michael Lonich, Managing Partner, at (408) 553-0801 or [email protected]. This notice was issued under California Civil Code section 1798.82.