Sprouse Shrader Smith PLLC Data Breach

On or around February 25, 2025, Sprouse Shrader Smith PLLC (“Sprouse Shrader”), a law firm, discovered suspicious activity associated with its network. According to the Notice of Data Breach sent to affected individuals, Sprouse Shrader immediately disconnected its systems, notified the Federal Bureau of Investigation and local law enforcement, and engaged independent cybersecurity specialists to investigate the incident.

Sprouse Shrader Smith PLLC is a Texas-based, full-service law firm founded in 1990 with offices in Amarillo, Austin, Victoria, and Dalhart. With nearly 40 attorneys, the firm provides client-centered legal counsel, focusing on areas like agriculture, oil and gas, real estate, litigation, and wealth planning.

Following the investigation, Sprouse Shrader determined that documents containing a limited amount of personal information may have been copied from its network during the incident. The firm worked with a third‑party vendor to identify and extract any personal information contained in the impacted documents. This review process was completed on December 29, 2025.

After identifying the affected documents and individuals, Sprouse Shrader began issuing written notification letters dated March 10, 2026, to impacted individuals whose information may have been involved.

As part of its response, Sprouse Shrader reported implementing additional security measures designed to reduce the risk of similar incidents in the future. These measures include changing all system passwords, adding enhanced endpoint monitoring software, and implementing additional security controls to further strengthen its network environment.

Sprouse Shrader also stated that it is offering complimentary credit monitoring and identity protection services through IDX for 12 or 24 months, depending on the affected individual’s circumstances, to those who enroll by the deadline provided in their notification letter.

At the time of notification, Sprouse Shrader indicated that it is not aware of any misuse of the affected personal information. However, the firm acknowledged that personal information may have been exposed and encouraged recipients to remain vigilant.

If you received a Notice of Data Breach from Sprouse Shrader Smith PLLC, it confirms that your personal information may have been impacted by this data security incident.

What information is involved in the Sprouse Shrader Smith PLLC Data Breach?

Compromised information may include:

According to the notification letter, the information that may have been affected includes an individual’s name, in combination with additional personal information specific to the affected individual, as outlined in the notification letter.

The specific data elements involved vary by individual and are detailed in each letter sent by Sprouse Shrader.

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. When PII is exposed in a data breach, it can potentially be misused for identity theft, financial fraud, or other unauthorized activity.

Because Sprouse Shrader provides legal services to individuals and businesses, some of the information involved may relate to sensitive legal or financial matters. Individuals whose information was involved are encouraged to monitor financial accounts, review credit reports, and carefully follow the guidance included in their notification letter.

Affected individuals are also encouraged to enroll in the offered credit monitoring and identity protection services, consider placing fraud alerts or credit freezes, and report suspicious activity promptly.

Law firms and other organizations that collect and store sensitive personal information have a responsibility to take reasonable measures to protect that data from unauthorized access. When a failure in security safeguards results in a data breach, affected individuals may have legal rights, which vary by state and depend on the nature of the information exposed and the circumstances surrounding the incident.

If you received a Notice of Data Breach related to the Sprouse Shrader Smith PLLC incident, your personal information may be at risk.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review.