Catalyst Brands LLC data breach
Catalyst Brands LLC reported a data breach to Indiana regulators on September 4, 2026, confirming a compromise of its network infrastructure. This incident may have exposed sensitive personal information, such as names, addresses, and payment data, leaving affected individuals at risk of fraud and identity theft.
Docket sheet
- Company
- Catalyst Brands LLC
- Venue
- Indiana Attorney General
- Filed
- September 4, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredMay 20, 2026
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralSeptember 4, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Email Address
- Mailing Address
- Phone Number
- Password or Credential Hash
- Payment Card Information
- Purchase and Order History
Clerk's notes
Catalyst Brands LLC, a prominent consumer products and brand management company, reported a data security incident to Indiana authorities on September 4, 2026. The company disclosed that its network infrastructure had been compromised, though specific technical details remain under investigation. This breach involves sensitive personal information collected through its extensive retail and e-commerce operations.
The compromised data categories include Full Name, Email Address, Mailing Address, Phone Number, Password or Credential Hash, Payment Card Information, and Purchase and Order History. Such a combination of personal identifiers and transaction data places affected individuals at a heightened risk for various malicious activities.
The exposure of this information can lead to targeted phishing attempts, credential-stuffing attacks across other online accounts, and financial fraud. Malicious actors could potentially use this data for unauthorized purchases, identity theft, or to open new accounts fraudulently in victims' names.
Companies like Catalyst Brands LLC are legally obligated to implement reasonable security measures to protect consumer data. A breach of this nature suggests that these foundational standards may not have been met, potentially exposing critical system vulnerabilities to external threats.
If you received a data breach notification from Catalyst Brands LLC, it indicates your information was involved in this incident. Such a notification establishes a basis for reviewing your legal options. We are currently investigating claims related to this breach and offer free case reviews to affected individuals, with no out-of-pocket costs unless we secure compensation.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.