Catalyst Brands LLC data breach
Catalyst Brands LLC reported a data security incident to the Washington Attorney General on September 4, 2026. This breach may have exposed sensitive personal details including Full Name, Email Address, and Payment Card Information. Individuals who received a notification letter should understand their potential risks and legal options.
Docket sheet
- Company
- Catalyst Brands LLC
- Venue
- Washington Attorney General
- Filed
- September 4, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurred
The filing does not state when the incident happened.
- 2
Reported to the Washington Attorney GeneralSeptember 4, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Email Address
- Mailing Address
- Password or Credential Hash
- Purchase and Order History
- Payment Card Information
- Date of Birth
- Phone Number
Clerk's notes
Catalyst Brands LLC, a company that manages consumer brands and e-commerce operations, officially reported a security incident to the Washington Attorney General on September 4, 2026. The report details an unauthorized compromise within the company's digital environment. As a central entity for numerous direct-to-consumer brands, Catalyst Brands LLC routinely handles a significant volume of customer data.
The information potentially exposed in this incident includes Full Name, Email Address, Mailing Address, Password or Credential Hash, Purchase and Order History, Payment Card Information, Date of Birth, and Phone Number. The compromise of financial payment card details, alongside other personal identifiers, could lead to various forms of fraud, including unauthorized transactions, identity theft, and targeted phishing scams.
Operating within Washington, Catalyst Brands LLC is obligated to comply with the Washington My Health My Data Act and the Washington Data Breach Notification Law. These laws mandate that businesses implement and maintain appropriate data security measures to protect consumer information. A data breach often indicates that these fundamental legal requirements may not have been adequately met.
Receiving a data breach notification letter from Catalyst Brands LLC confirms that your personal data was involved in this security event. This official notification establishes your potential legal standing to seek accountability for the exposure of your information. It is important to note that you do not need to prove actual financial loss to explore your legal options.
If you have received a notification regarding the Catalyst Brands LLC data breach, it is advisable to consider your next steps. Our firm is actively monitoring this case and offers a complimentary, no-obligation review of your situation. Contact us to assess your eligibility for participation in any potential legal action.
If a notification letter about this breach reached you, see every Washington data breach on file or browse all cases.
Other Washington docket entries
- Hands On Children’s MuseumWashington AGNovember 5, 2026Monitoring
- DreamHost, LLCWashington AGNovember 4, 2026Monitoring
- Frontline EducationWashington AGOctober 27, 2026Monitoring
- JM Bullion, Inc. (Silver.com, ProvidentMetals.com)Washington AGOctober 13, 2026Monitoring
- DriveWealth, LLCWashington AGOctober 13, 2026Monitoring
- iRhythm Technologies Inc.Washington AGOctober 6, 2026Monitoring
- Poppins Payroll CompanyWashington AGSeptember 29, 2026Monitoring
- Ridgeway Pharmacy LtdWashington AGSeptember 21, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.