Stitch Connect, Inc., the San Francisco company behind the Stitch.net online community for older adults, has reported a data security incident to the Texas Attorney General. This page summarizes what the public filing says, what kinds of information were involved, and what affected members can do next. Companies that collect personal and health-related details have a responsibility to protect them, and people deserve clear answers when that information is exposed.
Stitch Connect’s Data Breach Investigation
Stitch Connect, Inc. operates Stitch, an online membership community and companionship service for older adults. The company is based in San Francisco, California, and lets members browse profiles, join interest groups and take part in local events and group travel. Because a service like this asks members to share personal details in order to take part, the information it holds can be sensitive.
On October 16, 2026, a data security breach report for Stitch Connect, Inc. was published on the Texas Attorney General’s public data breach listing. The report lists the company’s address as 548 Market Street in San Francisco, and it identifies the types of information affected as the name of the individual, medical information and date of birth. The listing reports that 4,062 Texans were affected. It also indicates that notice was provided to consumers by email.
That figure is a count of Texas residents. The filing does not state how many people were affected across all states, so the total number of people whose information was involved has not been publicly disclosed. We will not estimate a nationwide number from a single state’s count. Companies that notify residents of several states often file separate reports with each state’s regulator, and each report may carry its own per-state figure. Other filings, if any, could show different numbers for other states.
The public listing is brief. It does not say how the incident happened. It does not say whether an outside party gained access to the company’s systems, whether information was sent to the wrong recipient, or whether a service provider was involved. It also does not state when the incident began, when it ended, or when the company first discovered it. The only date the filing provides is October 16, 2026, which is the date the report was published on the Texas listing. We are not drawing conclusions about the cause, and readers should rely on the notice they receive from the company for any details beyond what is listed here.
What the filing does make clear is the category of information involved. Medical information is among the most sensitive kinds of personal data, because it can reveal health conditions, treatments and personal circumstances that people reasonably expect to stay private. When it appears alongside a person’s name and date of birth, the combination can be used to build a convincing profile of an individual. The filing does not say what specific medical details were involved, and it does not list Social Security numbers or financial account numbers among the affected categories.
A name, date of birth and medical information together can be misused in several ways. Scammers who know a person’s health details may pose as a doctor’s office, insurer, pharmacy or government program and ask for payment or more personal information. Date of birth is a common identity verification detail, so it can help someone who is trying to open accounts, file claims or reset passwords in another person’s name. Older adults are frequent targets of these kinds of schemes, which is one reason notices about this incident deserve a careful read.
The Texas listing notes that details such as the number of affected Texans and whether notice was provided may change after a report is first listed. That means the figures on this page reflect the filing as it appeared when this page was written. If the company updates its report or files in other states, the numbers and descriptions could change.
Members who receive an email from Stitch Connect about this incident should read it closely and keep a copy. Be cautious with messages that appear to come from the company but ask you to click a link, confirm a password or provide payment details. When in doubt, go directly to the company’s website rather than using a link in an unexpected message.
The sections below explain what is known about the timing of the incident, which categories of information were listed in the filing, and the practical steps people can take. They also describe how to talk with a lawyer about your rights if you received a notice from Stitch Connect.
When Did This Breach Occur?
The public filing does not say when the incident took place or when Stitch Connect discovered it. The only date it provides is October 16, 2026, when the report was published on the Texas Attorney General’s data breach listing.
The filing indicates that consumers were notified by email. Members who think they may have been affected should check their inbox and spam folder for a message from the company, and keep any notice they receive for their records.
If the company later shares more detail about the timeline, this page may be updated.
What Information Was Breached?
According to the Texas filing, the information affected included the name of the individual, medical information and date of birth. The filing does not describe which specific medical details were involved.
The filing does not list Social Security numbers, driver’s license numbers or financial account details among the affected categories. Even so, a name and date of birth paired with health-related information can be sensitive and can be used to target people with convincing scams.
The filing reports that 4,062 Texans were affected. The total number of people affected in other states has not been publicly disclosed.
What You Can Do
Read any notice you receive from Stitch Connect carefully and keep a copy. Review your health insurance statements and explanations of benefits for services or claims you do not recognize, and report anything unfamiliar to your insurer or provider.
Stay alert to unexpected calls, emails and texts that ask for personal, health or payment information, even if they mention details that seem accurate. Do not click links or open attachments in messages you were not expecting.
The Federal Trade Commission recommends checking your credit reports regularly. You can request free reports from the three national credit bureaus through annualcreditreport.com, place a fraud alert, or place a security freeze on your credit file at no cost. Report suspected identity theft to the FTC at identitytheft.gov, to local law enforcement and to your state attorney general.
File a Data Breach Lawsuit Against Stitch Connect
If you received a notice from Stitch Connect, you may wish to speak with an attorney about your rights. Lawyers who handle data breach class actions can review the facts, explain whether the exposure of medical information, names and dates of birth may support a claim, and describe how a group case would work.
Class action lawsuits can allow affected people to seek relief together instead of each person pursuing a claim alone. No lawsuit is guaranteed, and the outcome of any case depends on the facts that come out as the incident is investigated.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
