Nickey Kehoe Reports 2026 Data Security Incident to California AG

Luxury design firm Nickey Kehoe filed a data breach notification with California regulators on May 26, 2026, following a security incident that occurred in March 2026. The breach exposed various personal details including names, contact information, and payment card data, requiring vigilance from affected individuals.

State: California
Breach date: March 29, 2026
Reported: May 26, 2026

What may have been exposed

Full Name
Email Address
Mailing Address
Phone Number
Payment Card Information
Purchase and Order History
Billing Address
Client Account Credentials

Nickey Kehoe, known for its interior design services and retail of luxury home goods, submitted a data breach notification to the California Attorney General's office on May 26, 2026. The filing indicates that a security incident took place around March 29, 2026, though the specific nature of the breach was not detailed in the public record.

According to the official filing, the incident resulted in the unauthorized access to several categories of personal information. The exposed data includes individuals' Full Name, Email Address, Mailing Address, Phone Number, Payment Card Information, Purchase and Order History, Billing Address, and Client Account Credentials.

The company has stated that an investigation into the scope and impact of the breach is currently ongoing. This process aims to understand the full extent of the compromise and to identify measures to enhance data security.

Individuals who received a notification letter from Nickey Kehoe should take immediate steps to protect their information. It is advisable to carefully review bank and credit card statements for any transactions that appear unauthorized or suspicious. Promptly report any discrepancies to your financial institutions.

Furthermore, consider changing passwords for any online accounts, particularly if you used similar credentials for your Nickey Kehoe client account. Be cautious of unsolicited emails, texts, or phone calls, as exposed contact information could be exploited in phishing or social engineering attempts.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Secure your online accounts
Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: California Attorney General filing

Related data breach cases

Browse all California data breaches View the full case directory