UPDATED: September 15, 2026

Click2Mail Data Breach

Click2Mail, the print-to-mail service operated by C2M, LLC, reported a data security incident to the Vermont Attorney General in September 2026. Some customers are being notified their information may have been exposed.

Click2Mail

Date of Breach: Reported to the Vermont Attorney General in September 2026; underlying incident reported mid-2026

Who was affected:

Clients of Click2Mail

Impacted Data:

Not fully disclosed in the Vermont filing; public reporting describes payment card information

Experienced a BREACH?

Click2Mail, a cloud-based print-to-mail service operated by C2M, LLC, reported a data security incident to the Vermont Attorney General’s Office in September 2026. Click2Mail handles mail on behalf of businesses and individuals, including legal notices, patient statements, and invoices, and as a result routinely stores names, addresses, and account information belonging to its customers and their own mail recipients.

Click2Mail’s Data Breach Investigation

According to a filing reported to the Vermont Attorney General’s Office, C2M, LLC, doing business as Click2Mail, experienced a security incident affecting a small number of Vermont residents. Public reporting separately indicates that Click2Mail’s checkout system was compromised, with payment card information reportedly harvested from customers making purchases on the company’s website, and that some customers began receiving notification of a data security incident in the weeks that followed.

Companies that process mail and payment transactions on behalf of other businesses, sometimes called print-to-mail or mail-fulfillment services, occupy a position in the data supply chain where a single compromise can affect customers of the mailing service as well as the individuals whose mail is being processed. When a checkout or payment system on a company’s own website is compromised, exposed information often includes payment card numbers and billing details in addition to standard account information. Individuals who used a debit or credit card to check out on Click2Mail’s site around the reported incident window should treat that card as potentially compromised even before receiving a formal notice, given the nature of the reported activity.

When Did This Breach Occur?

The incident was reported to the Vermont Attorney General’s Office in September 2026. Public reporting describes affected customers experiencing suspicious card activity following purchases in mid-2026, with the company’s investigation and notifications following in the weeks after.

What Information Was Breached?

The Vermont filing does not specify categories of information beyond confirming that a data security incident occurred. Public reporting describes payment card information as having reportedly been compromised via the company’s checkout process.

What You Can Do

If you are a Click2Mail customer or believe you may have been affected, consider taking these steps:

Review your card and bank statements for unauthorized charges
Contact your card issuer to request a replacement card if you used a card on Click2Mail’s site
Consider placing a fraud alert or credit freeze with the three major credit bureaus
Be alert to phishing emails or calls referencing this incident
Keep any notice you receive about this incident for your records

File a Data Breach Lawsuit Against Click2Mail

If you received a data breach notification letter from Click2Mail, or believe your personal or payment information was compromised in this incident, you may have legal options available to you. Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.

Were you recently affected by a data breach?

Other Data Breaches

Click2Mail

Date of Breach: Reported to the Vermont Attorney General in September 2026; underlying incident reported mid-2026

Nevada Estate Planning and Probate

Date of Breach: Reported to the Vermont Attorney General in September 2026

Cedars Foods

Date of Breach: Reported September 2026; not yet confirmed by the company

Frequently Asked Questions

What Should I Do If I Believe My Data Has Been Breached?

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

What Happens to Your Data in a Data Breach?

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

How Should I Respond to a Data Breach Notification?

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

What Evidence is Needed for a Data Breach Claim?

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Can a Company Be Sued for a Data Breach?

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

What is the Average Settlement in a Data Breach Lawsuit?

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.