Got a data breach letter from BRANDco?
Dapeer Law, P.A. is investigating a potential class action against BRANDco, an Orlando, Florida company, on behalf of people whose payment card information may have been captured by an unauthorized script on the checkout page of the BRANDco website between May 19 and July 5, 2026.
Latest on the BRANDco data breach
- : Dapeer Law opened its investigation following notice filings posted by the Massachusetts and Vermont Attorneys General.
Who qualifies for the BRANDco data breach investigation
You may be eligible to participate in a class action if any of the following applies:
- You received a data breach notification letter from BRANDco.
- Your letter does not offer credit monitoring. It encourages you to review your payment card account statements and report any unauthorized charges to your card issuer.
- You made a purchase on the BRANDco website between May 19 and July 5, 2026 and entered new payment card information at checkout.
- No proof of harm required to consult with counsel. You do not need to have already suffered identity theft to explore your legal options.
- Excluded: individuals who did not receive a breach notice and whose information was not involved in the incident.
Not sure if you qualify?
Send us your notice, we'll confirm your eligibility at no cost.
What happened in the BRANDco data breach
According to its notice letter, BRANDco ("BRANDco") discovered an unauthorized script embedded on the checkout page of the BRANDco website that was designed to capture payment card information. BRANDco says it removed the script and began an investigation with an independent forensic firm, which determined that the script was active on the site from May 19, 2026, through July 5, 2026. The letter does not state the date the script was discovered.
The letter states that the script did not collect payment card information on purchases made with cards previously stored to the website. However, for people who entered new payment card information on the site, the letter says the script could have captured their name, address, payment card number, PIN/security code, and expiration date. The Massachusetts filing lists name, address, credit/debit card numbers, financial account information, PIN/security code, and expiration date, and reports 48 Massachusetts residents affected. The letter also states that the incident affected 9 Rhode Island residents.
BRANDco's letter does not offer credit monitoring. The posted copy of the letter does not show its date, and the incident was reported to Massachusetts and Vermont regulators on October 29, 2026. Whether BRANDco's website security met legal standards, and how long it took to notify people after the script was discovered, are among the issues being evaluated.
What to do if you got a BRANDco data breach letter
Keep your notice letter
Do not discard it. Your letter explains what may have been involved and is important evidence if you decide to participate in a lawsuit.
Review your payment card statements
BRANDco's letter encourages you to review your payment card account statements and promptly report any unfamiliar or unauthorized charges to your card issuer. The letter does not offer credit monitoring, and reviewing your statements does not affect your right to pursue legal action.
Place a fraud alert or credit freeze
Contact Equifax, Experian, and TransUnion to place a fraud alert or freeze on your file. Request a free weekly credit report from AnnualCreditReport.com, and use the FTC's IdentityTheft.gov recovery guide.
Speak with a data breach attorney
Consultations with Dapeer Law are free and confidential. We'll review your notice, explain your options, and advise whether you may be eligible to join a class action.
Submit your notice for a free review
Two minutes online. A licensed attorney reviews every submission.
BRANDco breach timeline
Compensation you may be entitled to
Out-of-pocket expenses
Credit freezes, identity restoration services, and other costs incurred responding to the breach.
Time spent monitoring
Hours spent reviewing accounts, disputing fraudulent charges, and dealing with identity theft issues.
Identity theft & fraud losses
Unreimbursed funds stolen from accounts, unauthorized credit lines, or tax refund fraud tied to the breach.
Statutory damages
Certain state data breach and consumer protection statutes provide for fixed damages regardless of actual loss.
Injunctive relief
Court orders requiring BRANDco to implement stronger security on its website checkout page going forward.
Compensation categories depend on applicable state law, the types of data exposed, and documented losses. No recovery is guaranteed.
BRANDco data breach FAQ
I received a data breach letter from BRANDco. What should I do? +
Keep the letter, review your payment card account statements, and promptly report any unfamiliar or unauthorized charges to your card issuer, as the letter recommends. BRANDco's letter does not offer credit monitoring, so consider placing a free fraud alert or security freeze with Equifax, Experian, and TransUnion, and contact a data breach attorney for a free consultation.
Is the BRANDco data breach letter real or a scam? +
BRANDco has reported this incident to the Massachusetts and Vermont Attorneys General. Compare your letter to the official filing linked in Sources below, and use only contact details printed in your letter or in that filing. Be cautious of unexpected calls, texts or emails about the breach that ask for your Social Security number or account login. If you are unsure, send your letter to Dapeer Law for a free review.
Am I eligible to join a class action against BRANDco? +
If you received a breach notice from BRANDco about this incident, you are likely eligible for a free case evaluation. The letter says it was sent to people who made a purchase on the BRANDco website while the script was active, from May 19, 2026, through July 5, 2026. Eligibility depends on your state of residence, the information involved, and any losses you have suffered. Dapeer Law will review your notice at no cost.
How much money could I receive from a class action lawsuit? +
Data breach class action recoveries vary significantly. Settlements typically range from a few hundred dollars for basic out-of-pocket losses to several thousand dollars for documented identity theft, with class size, damages, and negotiation all affecting the final amount. No payout is guaranteed, and this investigation has not yet resulted in a settlement.
What personal information was exposed in the breach? +
BRANDco's letter says the script did not collect payment card information on purchases made with cards previously stored to the website. For people who entered new payment card information, the letter says the script could have captured name, address, payment card number, PIN/security code, and expiration date. The Massachusetts filing lists name, address, credit/debit card numbers, financial account information, PIN/security code, and expiration date. Your own letter may list what was involved for you.
Did BRANDco offer free credit monitoring? +
No. BRANDco's letter does not offer credit monitoring. It encourages you to review your payment card statements, report unauthorized charges to your card issuer, and monitor the transactions in your financial accounts and on your credit report. You can place a free fraud alert or security freeze with Equifax, Experian, and TransUnion.
How many people were affected by the BRANDco breach? +
BRANDco has not disclosed a total number of affected individuals in the sources reviewed. The Massachusetts filing lists 48 Massachusetts residents, and BRANDco's letter states that the incident affected 9 Rhode Island residents. These are state counts only. This page will be updated as more information becomes available.
Is there a deadline to take legal action? +
Yes. Statutes of limitations for data breach claims vary by state and legal theory, typically ranging from one to six years. Waiting can permanently bar your claim. Contact us as soon as possible for a free evaluation.
How do I get a copy of the official breach notice? +
A copy of BRANDco's notice letter is posted with its Massachusetts data breach filing on mass.gov (linked in Sources below). If you received a letter but no longer have it, Dapeer Law can assist you during your free consultation.
Sources & references
- Official breach notice filing · Massachusetts Data Breach Notification Filing, BRANDco., LLC
- Credit bureau freezes · Equifax · Experian · TransUnion
- Free weekly credit reports · AnnualCreditReport.com
- Identity theft recovery guide · FTC IdentityTheft.gov
Don't let the deadline decide for you. Submit your claim today.
You only have a limited window to act. Our team will review your notice, explain your options, and tell you whether you may be eligible to recover compensation, at no cost to you.
