Loving Guidance, LLC, doing business as Conscious Discipline, has reported a data breach to a state regulator. This page explains what the public filing says, what has not been disclosed and what customers can do now.
The facts below come from a state attorney general listing and may be updated as the company releases more information.
Conscious Discipline’s Data Breach Investigation
Loving Guidance, LLC does business under the name Conscious Discipline, the name most people know. The company’s own website identifies Loving Guidance as the operator of the Conscious Discipline site, and the state filing lists both names together. Conscious Discipline offers social-emotional learning training and materials, so its customers include educators, schools and families who buy books, courses, events and other resources online.
The breach became public through the Vermont Attorney General’s security breach notice listing. The entry is dated November 12, 2026, which is the date the notice was reported to the attorney general’s office. The listing classifies the filer as an other commercial organization and states that 1 Vermont resident was affected.
That figure needs careful reading. Vermont counts only its own residents, so the number describes how many Vermonters were notified, not the total number of people affected everywhere. A company that sells to customers across the country usually files a separate report with each state, and each report carries only that state’s count. The total for Conscious Discipline has not been published, and this page does not estimate one.
The listing names two categories of information: financial account codes, and credit and debit account information. Together they point to payment data rather than identity documents or health records. That is consistent with an online store, where the details a customer types in at checkout are the most sensitive items the company handles. The listing does not say whether card numbers, expiration dates, security codes or account numbers were involved, and it does not say whether the information was combined with names or addresses.
The listing also leaves out a great deal. It does not describe how the incident happened, when it began, when it was discovered or how long it lasted. It does not say whether an outside party took the information, whether the company’s website or a payment processor was involved, or whether the data has appeared anywhere online. Until the company or a regulator provides those details, they should be treated as unknown.
Payment information can be misused quickly. Stolen card details are often tested with small purchases and then used for larger ones, or sold to others who do the same. Because card issuers can cancel a card and reverse unauthorized charges, the financial damage can often be limited if the problem is spotted early. The more lasting risk is that the same details are used to make phishing messages look credible, for example an email that mentions a real purchase and asks for further information.
Online retailers and education businesses are frequent targets for cyberattacks because they take card payments through web forms and rely on outside software for checkout, email and customer accounts. A weakness in a single plug-in or vendor connection can expose payment data for many shoppers. That context applies to the sector as a whole and is not a statement about how this particular incident occurred.
Breach notification laws are designed to give people a chance to protect themselves. States set their own deadlines and content rules, and a person whose information was involved should receive a written notice describing what happened and what protection steps are available. If you have purchased from Conscious Discipline and received such a letter, keep it, because it is the best record of what the company says was involved.
People who have not received a letter but believe they may be connected to the company can still act. Review your card and bank statements, watch for unfamiliar activity, be careful with unexpected messages that mention an order, and consider the free protections described in the steps below. Legal help is also available for people who want to understand whether a claim is possible once more is known about the incident.
When Did This Breach Occur?
The listing gives November 12, 2026 as the date the breach was reported to the Vermont Attorney General. It does not give the date the incident took place, the date it was discovered or the date notices were mailed to affected people. Those dates have not been made public. If the company or another regulator publishes a fuller notice, compare its timeline with the date on any letter you received.
What Information Was Breached?
According to the Vermont listing, the information involved was financial account codes and credit and debit account information. The listing does not say which specific card or account details were exposed, whether every affected person had the same information involved, or what other details were stored alongside them. Read any notice you receive to see which items apply to you, and treat any payment card you used with the company as potentially affected.
What You Can Do
If you received a notice related to Conscious Discipline or believe you may be affected, consider these steps:
- Read the notice carefully and keep it, along with any enrollment details for protection services it offers.
- Because payment details are involved, contact your bank or card issuer, ask about replacing the card you used, and dispute any charge you do not recognize right away.
- Place a free fraud alert or a credit freeze with Equifax, Experian and TransUnion, and get your reports free at annualcreditreport.com.
- Review bank, card and insurance statements for anything you do not recognize.
- Be skeptical of unexpected calls, texts or emails that mention the incident, and report suspected identity theft to the Federal Trade Commission at identitytheft.gov.
File a Data Breach Lawsuit Against Conscious Discipline
Attorneys are looking into the data breach reported by Loving Guidance, LLC, doing business as Conscious Discipline, and want to hear from customers who received a notice. A lawsuit has not been confirmed, and whether you can seek compensation depends on what the company ultimately confirms about the incident. If you received a notice or believe your payment information was exposed, an attorney can explain whether you may be able to join a class action lawsuit.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
