DataBreachInformation.com
Received a Catalyst Brands LLC notification letter? Read the letter guide
MonitoringIndiana AG filing · September 4, 2026

Catalyst Brands LLC Reports 2026 Data Breach in Indiana

Catalyst Brands LLC reported a data breach to Indiana state regulators on September 4, 2026, stemming from an incident on May 20, 2026. The compromise included personal and financial data such as names, contact details, payment information, and credential hashes, posing risks to affected individuals.

State
Indiana
Breach date
May 20, 2026
Reported
September 4, 2026

What may have been exposed

  • Full Name
  • Email Address
  • Mailing Address
  • Phone Number
  • Password or Credential Hash
  • Payment Card Information
  • Purchase and Order History

Catalyst Brands LLC, a consumer products and brand management company, filed a data breach notice with Indiana authorities on September 4, 2026. This report concerned a security incident that occurred on May 20, 2026, impacting customer and consumer data.

According to the official public filing, the compromised information includes a range of personal identifiers. Specifically, exposed data categories include Full Name, Email Address, Mailing Address, Phone Number, Password or Credential Hash, Payment Card Information, and Purchase and Order History.

The exposure of such data means individuals may face various risks. For example, Full Name, Email Address, and Phone Number could be used in targeted phishing or spam campaigns. With Password or Credential Hash compromised, there is a risk of unauthorized access to online accounts, especially if similar credentials were used elsewhere.

Payment Card Information and Purchase and Order History could lead to fraudulent transactions or identity theft attempts. Individuals should remain vigilant for any unusual activity across their financial accounts and online profiles.

Recipients of a breach notification from Catalyst Brands LLC should take protective measures. It is strongly recommended to change passwords for any affected accounts and enable multi-factor authentication (MFA) wherever available for added security. Regularly monitoring bank and credit card statements for suspicious activity is also advised.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Watch your financial accounts

    Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.

  • Secure your online accounts

    Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases

Browse all Indiana data breachesView the full case directory