What happened
The law firm Rotstein & Shiffman, P.A. stored confidential client records on an insecure network. Attackers extracted the entire repository and published it. The firm has not meaningfully informed affected clients.
Your rights under Florida law
Florida Statute 501.171 (the Florida Information Protection Act) requires businesses to maintain reasonable security and to notify affected individuals within 30 days of a data breach. If you were not notified, your statutory rights were violated.
What you can do — free
- Freeze your credit with all three bureaus (Equifax, Experian, TransUnion). Free, strongest protection.
- File an FTC Identity Theft Report at IdentityTheft.gov — 15 minutes, free.
- Complain to the Florida Bar about the firm’s failure to protect client confidences (Rule 4-1.6).
- Complain to the Florida Attorney General under FIPA — the AG can investigate and fine the firm.
- Send the firm a written demand for notice, credit monitoring, and damages — template below.
- Consider small-claims court — Florida small claims handle up to $8,000, no lawyer needed.
Download the prepared forms below, fill in your details, and file. Every complaint creates pressure and a paper trail this firm cannot erase.