2026 Catalyst Brands — third-party HR/payroll server access ~May 26; SSNs/IDs (CA AG)
Data compromised
Name, SSN, DOB, driver’s license, passport, A-number, military/other government ID, contact info, financial account number (without access info), email/username with password or security answer, digital signature (varied by person)
Technical writeup
Verified California AG sample notice — September 2026 listing. Catalyst Brands LLC became aware around May 26, 2026 of unauthorized access to third-party–managed servers used for HR/payroll support; on August 5, 2026 determined personal information was obtained. Law enforcement notified; two years identity protection offered. National count not stated; recordsAffected 0; companyConfirmed true.
Root cause
Unauthorized access to certain third-party–managed servers supporting Catalyst Brands HR and payroll-related services; awareness ~May 26, 2026; impact determination August 5, 2026