Catalyst Brands Says Cyber Incident Exposed Personal Information
Summary
Catalyst Brands says an unauthorized party accessed third-party servers supporting its HR and payroll services around May 26, 2026, and obtained personal information, including Social Security numbers and government IDs.
Key points
- Catalyst Brands said the incident involved unauthorized access to servers managed by a third party supporting its HR and payroll-related services.
- The company became aware of the incident around May 26, 2026, and determined on August 5 that personal information had been obtained.
- Affected information varied and could include names, Social Security numbers, birth dates, government ID numbers, contact details, financial account numbers, and email or username credentials.
- Catalyst Brands said it blocked the unauthorized access, investigated with external cybersecurity experts, notified law enforcement, and added safeguards.
- The company offered affected individuals two years of identity protection and credit monitoring.
Article Details
- Victim Organization
- Catalyst Brands LLC
- Victim Domain
- Not disclosed
- Incident Type
- Unauthorized access to third-party-managed servers supporting HR and payroll-related services, resulting in a data breach
- Incident Date
- 2026-05-26
- Disclosure Date
- 2026-09-04
- Data Types Exposed
- First and last name
- Social Security number
- Date of birth
- Driver’s license number
- Passport number
- Alien Registration number (A-number)
- U.S. military identification number or other government-issued identification number
- Contact information
- Financial account number without access information
- Email or username with password or security answer
- Digital signature
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- Unauthorized access to relevant systems was blocked. Catalyst Brands launched an investigation with external cybersecurity experts, notified law enforcement, and implemented additional safeguards. Further operational disruption was not disclosed.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed