Security Notice

Notice of Data Security Incident

Last Updated: August 27, 2026

The Odom Firm, PLLC (the “Firm”) recently became aware of suspicious activity within particular Firm systems that may have affected the privacy of certain sensitive information. The Firm took immediate steps to investigate the nature and scope of the event. The Firm is issuing this notice to provide information about the incident and steps potentially impacted individuals may take to protect against misuse of their information, where appropriate.

We assure you that client confidentiality and the security of the information we maintain is of upmost importance to us, and we want you to know that we take seriously the responsibility to protect that information. We sincerely regret that this incident occurred, and we apologize for any inconvenience it may have caused you. Please review the rest of this notice for details about the incident and our response.

What Happened?

On February 24, 2026, the Firm was contacted by a third-party who claimed to have infiltrated the Firm’s systems and stolen data. A subsequent investigation, with assistance from our outside information technology (“IT”) support team and additional cybersecurity professionals, has confirmed that certain portions of the Firm’s systems were compromised in early February.

What Information Was Involved?

As part of our investigation, we were able to obtain a list of files the cybercriminal claims to have stolen. Our review of these files was recently completed following assistance from cybersecurity professionals.

At this time, we do not have any knowledge that your personal information contained in these files has been misused. Out of an abundance of caution, however, we are notifying persons whose information was exposed on a rolling basis so that you can take steps to protect your information, if you feel it is appropriate to do so.

We receive and maintain a variety of information about our clients and other persons involved in the matters we work on for our clients. The types of personal information that we maintain in our files that has been exposed through this incident could include: name; Social Security Number; driver’s license number; date of birth; address; medical information; and, in some clients’ cases, payment and other financial account information.

What Are We Doing?

The Firm has taken steps to address the threat, including by notifying and working with the Firm’s outside IT support to mitigate the impact and to limit any further outside access to Firm data. In addition to working with IT support, we have engaged cybersecurity professionals experienced in handling these types of incidents to assist us with our response and to assess the full scope of information impacted. This is an ongoing process. We have also notified and are cooperating with state regulators and law enforcement in connection with this incident.

The Firm is committed to maintaining the privacy and confidentiality of the information we maintain, and we have taken precautions to safeguard it. We continue to work with cybersecurity professionals to evaluate and modify our practices and internal controls to enhance the security and privacy of the information we maintain.

What Can I Do?

We are providing direct notice to potentially affected individuals for whom we have address information beginning on or about August 21, 2026. Additional information is included with that notice.

In the meantime, we encourage all our current and former clients to remain vigilant against incidents of identity theft and fraud by regularly reviewing account statements and free credit reports for suspicious activity and to detect errors. You may also review and consider the information and resources outlined in the below “Steps Individuals Can Take to Help Protect Their Personal Information.”

For More Information

If you have questions that are not answered by this letter or the enclosed information, you may contact us between 9 AM and 4:30 PM ET, Monday – Friday, excluding holidays. Please feel free to contact us as you normally would with those questions at (704) 377-7333.

STEPS INDIVIDUALS CAN TAKE TO HELP PROTECT THEIR PERSONAL INFORMATION

Place a fraud alert on your credit report. You have the option of placing a fraud alert on your credit report. A fraud alert is free of charge and easy to place. You may contact toll-free any one of the three major credit bureaus listed below. As soon as one bureau confirms your report, the others are simultaneously notified on your behalf.

Obtain a copy of your free credit report. You may also obtain a free copy of your credit report from each of the three major credit reporting bureaus once every 12 months by visiting www.annualcreditreport.com, calling toll-free (877) 322-8228, or by completing an Annual Credit Report Request Form and mailing it to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, Georgia 30348. It is recommended that you monitor your free credit reports for incidents of fraud and identity theft. You may purchase a copy of your credit report by contacting one of the three major credit reporting bureaus above.

Place a security freeze. By placing a security freeze, someone who fraudulently acquires your personal identifying information will not be able to use that information to open new accounts or borrow money in your name. You will need to contact the three national credit reporting bureaus listed above to place the freeze. Keep in mind that when you place the freeze, you will not be able to borrow money, obtain instant credit, or get a new credit card until you temporarily lift or permanently remove the freeze. There is no cost to freeze or unfreeze your credit files.

Review your account statements and monitor credit reports. It is recommended that you remain vigilant for incidents of fraud and identity theft by reviewing your financial account statements and monitoring your free credit reports for unauthorized access. Doing so can help you spot problems and address them quickly.

Notify law enforcement of any suspicious activity. You should also notify the appropriate law enforcement authorities, your state attorney general, and/or the U.S. Federal Trade Commission (FTC) of any suspected identity theft.

Federal and State resources to protect against identity theft. You can find additional information to help protect yourself from identity theft, including information about fraud alerts and credit report security freezes, by contacting one of the three major credit bureaus listed above, or by visiting the FTC’s website at www.ftc.gov/idtheft, by calling 1-877-ID-THEFT (1-877-438-4338), or by writing to the Federal Trade Commission, 600 Pennsylvania Ave., NW, Washington, DC 20580. You may also wish to review information provided by the North Carolina Attorney General at http://www.ncdoj.gov, by calling (877) 566-7226, or by writing to the North Carolina Office of the Attorney General, Consumer Protection Division, 9001 Mail Service Center, Raleigh, NC 27699.