HackingTechnologyInformationCustomer Data InvolvedFinancial accountIdentity (basic)PCILowActive

C2M LLC

bd_4b826400f91eae50 · schema v1 · pii pii-v2

Severity

Low

Discovered

Jul 6, 2026

Filed

Sep 1, 2026

To disclose

—

Affected

45state residents only

Confidence

67%

Full breach record for C2M LLC →2 incidents on file

Click2Mail (C2M LLC) notified Massachusetts residents of a data security incident confirmed on July 6, 2026. An unauthorized actor captured keystroke data from online transactions, exposing names, addresses, and credit card information. The investigation is ongoing. The company contained the threat and engaged external cybersecurity professionals. No specific count of affected individuals was disclosed in the notice.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 6, 2026

Discovered

Sep 1, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed45 affectedView incident

Name: C2M LLC
norm: c2m

Name: C2M LLC
norm: c2m
Also named: C2M LLCdba oflegal entity
Click2Maildba oftrade name
Industry: Technologyllm

Discovered: Jul 6, 2026
Materiality determined: —
Notification sent: Sep 15, 2026
Affected individuals: 45state-resident count only
Data types: Financial accountIdentity (basic)PCI
Attack vector: Unknown
MITRE ATT&CK: T1056 Input Capture
Threat actor: External

During the incident: Contained the threat
Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals experienced in handling these types of incidents
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1551-c2m-llc-dba-click2mail/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 1, 2026
Raw hash: f34d9af05e6a65a18a3d7c713fbb793cf38b39ef49c189dbffc6988556242153

Reporting entityC2M LLC

Victim entityC2M LLC

Incidentdiscovered Jul 6, 2026

Stated responseContained the threat

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov