PalmFlex, Inc

PalmFlex Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2026-04-02 and was reported on 2026-07-22. 25 Indiana residents were affected. 818 individuals affected in total.

PalmFlex Inc. notified Nebraska customers of a data breach occurring between April 2, 2026, and June 25, 2026. A third party accessed the administrative interface and injected unauthorized code, potentially compromising payment card information for orders placed during that window. PalmFlex engaged cybersecurity specialists, reset credentials, and implemented additional security controls. Notices were sent on July 15, 2026.

PalmFlex Inc. notified New Hampshire residents of a security incident discovered on June 25, 2026, where a third party accessed the administrative interface and injected unauthorized code into the website. The code was immediately removed, and access was remediated. 12 New Hampshire residents were notified as payment card information may have been compromised. The company engaged cybersecurity specialists, reset credentials, and implemented additional security controls.

PalmFlex, Inc. notified Massachusetts customers on July 15, 2026, that payment card information may have been accessed by an unauthorized third party. The company engaged hosting providers and cybersecurity specialists to investigate, secure systems, reset credentials, and implement additional access restrictions. No specific count of affected individuals was provided.