Confirmed

Catalyst Brands: personal data obtained via HR/payroll vendor servers

Unauthorised access to servers managed by a third party supporting HR and payroll led to names, SSNs, passport numbers and other data being obtained.

Last updated: 2026-11-09

Overview

Learned around May 26, 2026; determined August 5. No total is given.

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

Verify notices through official channels, avoid links in unexpected messages, do not provide credentials, and review credit reports and statements.

Sample consumer notice filed with California AG (Catalyst Brands LLC)California Department of Justice, Office of the Attorney General · 2026-11-09
California AG data breach report: Catalyst Brands LLCCalifornia Department of Justice, Office of the Attorney General · 2026-11-09