Hulberg & Associates Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Hulberg and Associates, Inc. data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Hulberg and Associates, Inc.
Hulberg and Associates, Inc. is a consultancy and real estate firm based in San Jose, California. Established in 1976, the company provides real estate appraisal and valuation services, as well as assisting clients with buying, selling and renting properties.
The company primarily serves the San Francisco Bay Area, including San Jose, Oakland and San Francisco, along with surrounding counties such as Santa Clara.
What happened?
On July 11, 2025, Hulberg and Associates, Inc. detected suspicious activity on a company server. A forensic investigation revealed that an unknown third party, later identified as the PLAY ransomware group, gained unauthorized access to a server storing human resources files.
The data breach exposed sensitive information belonging to current and former employees as well as independent contractors. PLAY ransomware publicly claimed responsibility for the attack and threatened to publish stolen data on July 18, 2025. The company began notifying impacted individuals by mail on Aug. 19, 2025.
Information Exposed
- Name
- Date of birth
- Social Security number
- Driver's license or state ID card number
- Financial and banking information
The cybersecurity was reported to the Massachusetts and Washington Attorney General offices beginning on Aug. 19, 2025. The total number of impacted individuals has not been released.
Your Rights and Next Steps
If you received a notice from Hulberg and Associates, Inc. regarding this data breach, you have important rights and options. You may be entitled to seek compensation for any harm or inconvenience caused by this cybersecurity incident.
- Credit monitoring and identity theft protection services: Enroll in the 24 months of Experian IdentityWorks credit monitoring and identity theft restoration services, provided by the company.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
You May Be Entitled to Compensation
If your information was exposed in the Hulberg and Associates, Inc. data breach, you may be eligible for financial compensation. Lawyers are investigating potential claims on behalf of those affected.
Completing the form below is the first step to joining a lawsuit and protecting your rights.