C2M LLC dba Click2Mail data breach
C2M LLC dba Click2Mail reported a data breach impacting client information processed through its digital printing and mail services. This incident involved exposed Full Name, Mailing Address, Email Address, Phone Number, Financial Account Information, Document Content and Metadata, Internal Client ID Numbers, and Transaction History. Affected individuals face potential risks from this compromise, including targeted fraud and identity theft.
Docket sheet
- Company
- C2M LLC dba Click2Mail
- Venue
- Indiana Attorney General
- Filed
- September 15, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredJuly 6, 2026
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralSeptember 15, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Mailing Address
- Email Address
- Phone Number
- Financial Account Information
- Document Content and Metadata
- Internal Client ID Numbers
- Transaction History
Clerk's notes
On September 15, 2026, C2M LLC, operating as Click2Mail, notified the Indiana Attorney General of a data security incident. This report indicates that a breach occurred on July 6, 2026, impacting information handled by the digital printing and direct mail automation provider. The precise methods of the intrusion remain under evaluation, with regulatory bodies currently monitoring the situation.
The compromised data, as reported by Click2Mail, included Full Name, Mailing Address, Email Address, Phone Number, Financial Account Information, Document Content and Metadata, Internal Client ID Numbers, and Transaction History. As a service handling significant client data for distribution, Click2Mail routinely processes such sensitive information.
Exposure of this specific combination of personal and financial information presents considerable risks. Malicious actors could potentially use exposed names, mailing addresses, and transaction history for targeted phishing campaigns or mail fraud. Additionally, the compromise of financial account information or document content may lead to unauthorized access or fraudulent activity.
Companies entrusted with processing sensitive third-party data, such as C2M LLC dba Click2Mail, are legally obligated to maintain robust security protocols. This duty of care requires implementing safeguards to prevent unauthorized access and protect client information. A data breach of this nature often prompts questions regarding the adherence to these fundamental security responsibilities.
If you have received a data breach notification letter from C2M LLC dba Click2Mail, it signifies that your information was part of this incident. This notification provides a formal basis for understanding your legal standing and available options. Our firm offers case reviews to assess potential claims related to data security failures.
Individuals affected by the Click2Mail data breach may be eligible for a free, no-obligation case review. This allows for an evaluation of your situation without any upfront cost. You would only owe legal fees if a recovery is secured on your behalf. This communication constitutes attorney advertising and does not establish an attorney-client relationship.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.