Opportune Data Breach Impacts 128k Individuals

Opportune LLP, a Houston-based global business advisory firm focused on the energy industry, disclosed a data breach that exposed sensitive personal information of consumers.

An unauthorized actor gained access to its network on or about June 22, 2026, and the intrusion lasted until July 1, 2026. After a forensic investigation and document review, Opportune determined on Aug. 18, 2026, that the affected systems contained personal information.

The personal information confirmed as exposed in the breach included names, Social Security numbers and financial account information including debit or credit card numbers.

A total of 128,106 individuals were impacted, including 38,068, previously 32,174, of Texas, 322 Massachusetts residents, 316 Indiana residents, 86, previously 56, of Vermont and 72 New Hampshire residents.

Opportune began mailing notification letters on Sept. 17, 2026. Opportune also reported the breach to the California Attorney General on Oct. 22, 2026.

Notably, a ransomware group known as Chaos claimed responsibility for the attack. On July 8, 2026, the group posted a claim on the dark web. In its dark web posting, the Chaos group claimed to have obtained 750 gigabytes of data from Opportune LLP.

Opportune's response to the breach

Opportune is offering affected individuals 12 months of complimentary triple-bureau credit monitoring, credit report and credit score services through Cyberscout, a TransUnion company. The deadline to enroll is 90 days from the date of the notification letter.

Individuals who have questions can call 1-888-950-5878, Monday through Friday from 8 a.m. to 8 p.m. Eastern time, excluding major U.S. holidays.