ProCamps, a Cincinnati-based company that runs camps for athletes and coaches, disclosed that an unknown actor acquired camp enrollment data stored in the cloud before March 17, 2026, affecting participants’ personal information.
ProCamps’s Data Breach Investigation
ProCamps is an event management company based in Cincinnati, Ohio that develops and operates camps for athletes and coaches. In late September 2026, it filed a sample Notice of Data Security Incident with the California Attorney General, which was reported to that office on September 30, 2026. The letter describes an incident limited to data stored in the cloud and involving camp enrollment information. The public copy is a template addressed to a placeholder name, so details specific to an individual recipient are not shown.
According to the notice, ProCamps became aware of a potential data security incident on or about March 17, 2026. The company says it engaged cybersecurity experts to investigate. The investigation determined that an unknown actor acquired certain camp enrollment data without authorization sometime before March 17, 2026. The notice does not give a more precise date for when the unauthorized acquisition happened, and it does not describe how the actor reached the cloud-stored data or whether anyone has claimed responsibility.
After the initial investigation, ProCamps hired a third-party vendor to carry out a comprehensive review of the affected data to see whether it contained personal information. The company says that on September 3, 2026, it confirmed the scope of the impact and obtained information sufficient to send notice. That means roughly five and a half months passed between the company learning of the incident and confirming whose information was involved, a delay that is common when large sets of records have to be reviewed file by file, but one that leaves affected people without notice for a long time.
The letter states that the data involved included the recipient’s name together with information they provided during the camp enrollment process. The sample letter refers to this only in general terms and does not itemize those enrollment details. The company says the incident did not involve Social Security numbers, driver’s license numbers, or financial account information. Because camp enrollment typically involves families, it would not be surprising for the records to relate to participants and their parents or guardians, but the notice does not say which categories of people are covered, and this page does not assume so.
ProCamps states that it has put additional security measures in place to further protect camp enrollment data and to reduce the risk of future incidents. The notice does not offer complimentary credit monitoring or identity protection services, which distinguishes it from many other breach notices. It does provide a help line, available for 90 days from the date of the letter on weekdays from 8:00 a.m. to 8:00 p.m. Eastern time, excluding major U.S. holidays.
The filing does not state how many people were notified. The letter’s state-specific sections list the attorneys general of California, the District of Columbia, Florida, Illinois, New York, Puerto Rico, and Texas, which suggests recipients in a number of jurisdictions, but that list is not a count of those affected.
Even without Social Security or financial account numbers, enrollment records can be useful to scammers. A name combined with contact information and details about a child’s or adult’s athletic activities can make a fraudulent message look credible, for example a fake refund, a payment request for a camp, or a message that appears to come from an organizer. Families are often more likely to respond to messages that appear to relate to their children’s activities.
State breach-notification laws require organizations to notify affected residents, and often the attorney general, when certain personal information is exposed. These filings make incidents like this one public. The key dates are the company’s awareness on or about March 17, 2026, the confirmation of the scope on September 3, 2026, and the report to the California Attorney General on September 30, 2026.
When Did This Breach Occur?
ProCamps says it became aware of a potential data security incident on or about March 17, 2026. The investigation found that an unknown actor acquired camp enrollment data without authorization at some point before that date. The company confirmed the scope of the impact on September 3, 2026, and the incident was reported to the California Attorney General on September 30, 2026.
What Information Was Breached?
The notice says the data involved included each person’s name combined with information provided during the camp enrollment process. The sample letter does not itemize that enrollment information. ProCamps states that Social Security numbers, driver’s license numbers, and financial account information were not involved. No further data types have been publicly disclosed, so none should be assumed.
What You Can Do
If you received a letter, read it closely to see what applies to you. The company is not offering credit monitoring, so consider reviewing your credit reports for free at annualcreditreport.com and think about a free fraud alert or security freeze with Equifax, Experian, and TransUnion. Be careful with unexpected emails, texts, or calls that mention camps, payments, or refunds, and confirm requests through contact details you already trust. You can reach the ProCamps help line listed in your letter, and you can report suspected identity theft at identitytheft.gov.
File a Data Breach Lawsuit Against ProCamps
When an organization that holds information about participants and families may not have protected it adequately, the people affected can have legal options. Data breach lawsuits commonly examine whether reasonable safeguards were in place and whether notice was given in a timely way. Whether you can take part depends on your circumstances, including whether you received a notice and what it says. An attorney can review your letter and explain what may be available to you.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
