CHP 11-99 Foundation Data Breach

CHP 11-99 Foundation recently reported a data breach involving unauthorized access to staff email accounts. Although the breach was identified as an attack on the Foundation’s email system, it may have exposed sensitive personal and financial information of members and other individuals involved with the Foundation.

CHP 11-99 Foundation’s Data Breach Investigation

On September 16, 2025, a staff member at CHP 11-99 Foundation received a suspicious email that seemed to be a phishing attempt. In response, the staff member forwarded the email to the Foundation’s external service provider’s Help Desk for further inspection. The Help Desk cleared the link in the email, stating that it was “clean,” which led the staff member to click the link, unknowingly initiating a security breach.

The attack was not identified until September 24, 2025, when the hacker attempted to use the compromised email account in a phishing attack aimed back at the same Help Desk. The service provider detected this malicious attempt and flagged the incident. Following this, CHP 11-99 Foundation conducted a thorough investigation into the breach and the scope of information that may have been compromised.

The investigation revealed that the attacker had full access to the staff member’s email account, including all email folders and documents contained within them. These documents included membership applications, merchandise purchases, and payment forms, which contained sensitive personal and financial information. Despite this access, the investigation showed no evidence that the attacker exploited the exposed data, as the attack was detected before further misuse could occur.

In response, CHP 11-99 Foundation is continuing its investigation into the incident and has taken additional steps to strengthen its security protocols.

When Did This Breach Occur?

• Date of Public Disclosure: Not yet publicly disclosed

• Breach Period: September 16, 2025 – September 24, 2025

What Information Was Breached?

The breach may have exposed the following personal and financial information:

• Full name

• Mailing address

• Email address

• Bank or credit card information

• Driver’s license number

• Membership applications and merchandise purchase forms

While the investigation has not shown any misuse of the information, the unauthorized access remains a serious concern.

What You Can Do

If you have been notified by CHP 11-99 Foundation, it is important to take the following steps to protect your information:

• Monitor your credit and bank statements for any unusual or unauthorized transactions.

• Sign up for identity theft protection services, if offered by CHP 11-99 Foundation or other providers.

• Be vigilant about phishing attempts, as the attacker has already targeted the service provider with phishing emails.

• Place a fraud alert or credit freeze on your credit file to prevent unauthorized accounts from being opened in your name.

• Report any suspicious activity to your bank, credit card company, or other relevant financial institutions immediately.

Additionally, it’s important to remain alert for any suspicious communications you may receive, as phishing attacks often target those whose information has been compromised.

File a Data Breach Lawsuit Against CHP 11-99 Foundation

If you were affected by the CHP 11-99 Foundation data breach, you may be entitled to join a class action lawsuit. Data breaches involving personal and financial information can lead to identity theft, fraud, and emotional distress, and victims deserve compensation.

By participating in a class action lawsuit, you may be able to recover damages for the losses resulting from this breach. At Class Action U, we are committed to helping victims of data breaches hold organizations accountable for failing to protect sensitive data.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.