UPDATED: September 1, 2026

Primary Jane Data Breach

Primary Jane, a CBD and live resin product provider, notified customers of a data breach involving credit and debit card account information. Affected individuals should monitor their card statements closely for unauthorized charges.

Primary Jane

Date of Breach: Notification began August 28, 2026

Who was affected:

Clients of Primary Jane

Impacted Data:

Credit and debit card account information

Experienced a BREACH?

Primary Jane, a CBD and live resin product provider based in Hudson, New Hampshire, recently disclosed a data security incident affecting customers who purchased its hemp-derived products. Companies that process online payments have a responsibility to safeguard customer financial data from unauthorized access, and a breach involving credit and debit card numbers deserves a serious response from anyone who has shopped with the company.

Primary Jane’s Data Breach Investigation

On August 28, 2026, Primary Jane began notifying affected individuals of a data security incident, according to a report filed with the Massachusetts Office of Consumer Affairs and Business Regulation. The company has not publicly disclosed the total number of individuals affected or the specific cause of the breach, such as whether it stemmed from a compromised payment processor, a website vulnerability, or another type of unauthorized access.

E-commerce businesses handling recurring online orders, including specialty retailers like Primary Jane, are frequent targets for cybercriminals seeking payment card data, since a single successful intrusion into a checkout system or customer database can expose the card numbers of many customers at once. When credit and debit card account information is exposed, affected individuals face the risk of unauthorized charges and, in some cases, further attempts at identity theft using any additional personal details that may have been taken alongside the payment data.

As more information becomes available about the scope and cause of this incident, this page will be updated accordingly. Individuals who made purchases with Primary Jane, whether through its website or in connection with its small-batch, lab-tested product lines, should review any notification they receive carefully.

When Did This Breach Occur?

Primary Jane began notifying affected individuals on August 28, 2026. The company has not publicly disclosed the specific date the underlying security incident occurred or when it was first discovered internally.

What Information Was Breached?

According to the notification filed with Massachusetts regulators, the breach involved credit and debit card account information. The company has not released a more detailed breakdown of which additional data elements, if any, were also affected.

What You Can Do

If you believe you may have been affected by this breach, consider taking the following steps:

Review your notification letter from Primary Jane carefully and retain a copy for your records.
Contact your card issuer to request a replacement card number if you used a card on the Primary Jane website.
Monitor your credit and debit card statements closely for unauthorized charges.
Enroll in any complimentary credit monitoring or identity protection services the company offers.
Consider placing a fraud alert with the three major credit bureaus (Equifax, Experian, and TransUnion) as an added precaution.

File a Data Breach Lawsuit Against Primary Jane

If you were notified that your personal information was compromised in the Primary Jane data breach, you may be entitled to compensation.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.

Were you recently affected by a data breach?

Other Data Breaches

Primary Jane

Date of Breach: Notification began August 28, 2026

The Florida Aquarium

Date of Breach: Notification began September 1, 2026

Mountain Laurel Medical Center

Date of Breach: Reported to the Vermont Attorney General on September 1, 2026

Frequently Asked Questions

What Should I Do If I Believe My Data Has Been Breached?

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

What Happens to Your Data in a Data Breach?

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

How Should I Respond to a Data Breach Notification?

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

What Evidence is Needed for a Data Breach Claim?

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Can a Company Be Sued for a Data Breach?

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

What is the Average Settlement in a Data Breach Lawsuit?

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.