Stitch

bd_1e9c3aca2a590253 · schema v1 · pii pii-v2

Stitch Connect Inc discovered on September 18, 2026, that an attacker exploited a vulnerability in its conversations system to create an account and read the most recent private messages of members. The incident affected 122 New Hampshire residents. Data exposed included profile details (first name, photos, bio, interests, suburb, preferences), some dates of birth, and the content of the last message in some conversations, which may have contained contact details, health-related comments, or financial topics. No SSNs, driver's licenses, passport numbers, financial account numbers, or passwords were involved. The company blocked the attacker, closed the vulnerability, implemented two-factor authentication, and removed dates of birth from profile data. Notices were sent to affected residents between September 21 and 23, 2026.

J jump to incidentP pin to compareR raw source