Catalyst Brands LLC
bd_a2ab34088c77a9d8 · schema v1 · pii pii-v2
Full breach record for Catalyst Brands LLC →Catalyst Brands LLC notified Massachusetts residents of a cybersecurity incident involving unauthorized access to servers managed by a third-party HR and payroll provider on or around May 20, 2026. The breach exposed personal information including names, Social Security numbers, driver's license numbers, financial account numbers, and credentials. The company engaged external cybersecurity experts, blocked access, notified law enforcement, and offered two years of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
May 20, 2026
Begins
Sep 1, 2026
Filed
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- Oregon State AGbd_0550d191ece545702026-09-04 · +3dVerified
- Vermont State AGbd_172f216acdf7b8692026-09-04 · +3dVerified
- South Carolina State AGbd_18cd4f036aca2f662026-09-04 · +3dVerified
- Washington State AGbd_1b7f182822c9351b2026-09-04 · +3dVerified
Show 2 more filings ↓Show fewer ↑up to 8d gap
- California State AGbd_ca428af701749cf92026-09-04 · +3dCandidate
- Texas State AGbd_e254141c1a0fc7702026-09-09 · +8dVerified
Filing propagation · 7 filings · 7 states
View merged incident ↗Pattern: first filing Sep 1 (MA), last Sep 9 (TX) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.