Idera Data Breach Exposes Sensitive Personal Information of Over 2,000 Individuals Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating a security incident involving Idera (operating as Flash Charm Inc.), a Houston-based software company. The breach, detected on October 31, 2025, involved unauthorized access to a third-party file-hosting system, though Idera’s internal systems and products remained unaffected. Forensic investigations determined the breach occurred on August 23, 2025, exposing the sensitive data of 2,015 individuals across the U.S., including 606 in Texas, 36 in Massachusetts, and 2 in Maine. Affected consumers were notified via U.S. mail on February 26, 2026. Compromised data included: - Names, addresses, and contact details - Social Security numbers and driver’s license numbers - Government-issued IDs (passport/state ID numbers) - Credit/debit card and financial account numbers - Health insurance information - Dates of birth Idera responded by containing the breach, notifying federal law enforcement, and engaging forensic teams. The incident highlights risks associated with third-party file-hosting systems, particularly for organizations handling sensitive personal and financial data. Legal action is being pursued for affected individuals.