Chief River Nursery Data Breach Lawsuit Investigation
Received a June 2026 breach notice from Chief River Nursery?
Dapeer Law, P.A. is investigating a potential class action against Chief River Nursery Co., a Wisconsin-based grower and online retailer of bare-root trees and shrubs, on behalf of customers whose payment card information may have been exposed when malicious code on the company's checkout page captured card data during the June 2026 data security incident disclosure.
Who may qualify
You may be eligible to participate in a class action if any of the following applies:
- You received a data breach notification letter from Chief River Nursery dated June 2026.
- Chief River Nursery did not offer complimentary credit monitoring in its breach notice.
- You purchased plants or supplies on ChiefRiverNursery.com between February 12 and March 17, 2026, and entered payment card information during checkout.
- No proof of harm required to consult with counsel. You do not need to have already suffered identity theft to explore your legal options.
- Excluded: individuals who did not receive a breach notice and whose information was not involved in the incident.
Not sure if you qualify?
Send us your notice, we'll confirm your eligibility at no cost.
What happened
Chief River Nursery Co., a Wisconsin-based grower and online retailer of bare-root trees and shrubs, detected suspicious activity on its e-commerce website on March 17, 2026, and launched an investigation. According to a notice filed with the Maine Attorney General, a third-party forensics team later confirmed that malicious code placed on the checkout page could have copied payment card data entered by customers during transactions processed between February 12 and March 17, 2026.
Chief River Nursery began mailing written notifications to affected customers on June 1, 2026, approximately 76 days after it discovered the suspicious activity. The company did not offer complimentary credit monitoring services, instead advising customers to review their card and bank statements and report any unauthorized charges. The information that may have been copied includes the name on the order along with the payment card number, expiration date, and security code (CVC/CVV). The total number of affected individuals has not been publicly disclosed.
Payment card breaches caused by malicious checkout code carry a heightened risk of fraudulent charges and card-not-present fraud. Affected customers are encouraged to monitor their statements closely, consider placing a fraud alert or security freeze with the major credit bureaus, and contact a data breach attorney to understand their legal options.
What to do if you received a letter
Keep your notice letter
Keep your breach notice letter. It documents when Chief River Nursery notified you and is important evidence if you decide to participate in a lawsuit.
Monitor your accounts and place a fraud alert
Review your payment card and bank statements for unauthorized charges and report anything suspicious to your card issuer using the number on the back of your card. Place a free fraud alert or security freeze with Equifax, Experian, and TransUnion, and order free credit reports at AnnualCreditReport.com. Chief River Nursery did not offer complimentary credit monitoring in its notice.
Place a fraud alert or credit freeze
Contact Equifax, Experian, and TransUnion to place a fraud alert or freeze on your file. Request a free weekly credit report from AnnualCreditReport.com, and use the FTC's IdentityTheft.gov recovery guide. For payment card breaches, also watch for new account openings or credit inquiries you do not recognize on your credit reports.
Speak with a data breach attorney
Consultations with Dapeer Law are free and confidential. We will review your notice, explain your legal options, and advise whether you may be eligible to join a class action against Chief River Nursery.
Submit your notice for a free review
Two minutes online. A licensed attorney reviews every submission.
Breach timeline
Compensation you may be entitled to
Out-of-pocket expenses
Credit freezes, identity restoration services, and other costs incurred responding to the breach.
Time spent monitoring
Hours spent reviewing accounts, disputing fraudulent charges, and dealing with identity theft issues.
Identity theft & fraud losses
Unreimbursed funds stolen from accounts, unauthorized credit lines, unauthorized payment card charges, or tax refund fraud tied to the breach.
Statutory damages
Certain state data breach and consumer protection statutes provide for fixed damages regardless of actual loss.
Injunctive relief
Court orders requiring Chief River Nursery to implement stronger data security practices to prevent malicious code from being placed on its checkout page and capturing customer payment card data in the future.
Compensation categories depend on applicable state law, the types of data exposed, and documented losses. No recovery is guaranteed.
Common questions
I received a data breach letter from Chief River Nursery. What should I do? +
Verify the dates listed in your letter and keep it as documentation. Review your payment card and bank statements for any unauthorized charges and report them to your card issuer immediately using the number on the back of your card. Order free credit reports at AnnualCreditReport.com or by calling 1-877-322-8228. Consider placing a free fraud alert or security freeze with Equifax, Experian, and TransUnion. Contact Dapeer Law for a free, confidential case evaluation to understand your legal options.
Am I eligible to join a class action against Chief River Nursery? +
You may be eligible if you received a breach notice from Chief River Nursery, or if you purchased plants or supplies on ChiefRiverNursery.com between February 12 and March 17, 2026, and entered payment card information at checkout. Eligibility can depend on your state of residence, the categories of data exposed, and whether you experienced fraudulent charges or other losses. Our attorneys can review your notice and advise you at no cost.
How much money could I receive from a class action lawsuit? +
Data breach class action recoveries vary significantly. Settlements typically range from a few hundred dollars for basic out-of-pocket losses to several thousand dollars for documented identity theft, with class size, damages, and negotiation all affecting the final amount. No payout is guaranteed, and this investigation has not yet resulted in a settlement.
What personal information was exposed in the breach? +
According to the official notice filed with the Maine Attorney General, the incident may have exposed the name on your order along with your payment card number, expiration date, and security code. Review your individual notice letter for specifics about your account.
Did Chief River Nursery offer free credit monitoring? +
No. Chief River Nursery did not offer complimentary credit monitoring in its breach notice. The company advised customers to monitor their account statements and credit reports. You can place a free fraud alert or security freeze with each of the three major credit bureaus at no charge, and order free credit reports at AnnualCreditReport.com.
How many people were affected by the Chief River Nursery breach? +
The total number of affected individuals was not specified in the notice filed with the Maine Attorney General. This page will be updated as additional information becomes available.
Is there a deadline to take legal action? +
Yes. Statutes of limitations for data breach claims vary by state and legal theory, typically ranging from one to six years. Waiting can permanently bar your claim. Contact us as soon as possible for a free evaluation.
How do I get a copy of the official breach notice? +
The official breach notification is publicly available on the Maine Attorney General's data breach notifications portal. Dapeer Law can help you locate and review your notice during a free consultation.
Sources & references
- Official breach notice filing · Maine Attorney General, Data Breach Notifications Portal
- Company · Chief River Nursery Co. (chiefrivernursery.com)
- Credit bureau freezes · Equifax · Experian · TransUnion
- Free weekly credit reports · AnnualCreditReport.com
- Identity theft recovery guide · FTC IdentityTheft.gov
Don't let the deadline decide for you. Submit your claim today.
You only have a limited window to act. Our team will review your notice, explain your options, and tell you whether you may be eligible to recover compensation, at no cost to you.
