54 Below Data Breach

An unauthorized person gained access to 54 Below's network environment. The organization worked with external cybersecurity specialists to determine the scope of the incident and identify files that may have been accessed.

After completing the review, 54 Below identified individuals whose personal information appeared in the relevant files. The notice submitted in Massachusetts confirms the event and the identity-protection services offered to affected people.

The information potentially involved varied by person. Reported data categories include names, Social security numbers, driver's license numbers, financial account information, and credit or debit card numbers.

Not every data category was present for every individual. Affected people were notified according to the types of information found in their records.

Social Security and driver's license numbers can be used for fraudulent account opening, identity theft, or impersonation in official processes. Financial-account and payment-card information may also increase the risk of unauthorized transactions.

Fraudulent notices that use the real organization and incident name may attempt to persuade affected people to disclose passwords, card details, or verification codes.

Bank and payment-card activity and credit reports should be reviewed regularly, and unfamiliar transactions or accounts should be reported immediately. A credit freeze or fraud alert may be appropriate where suspicious activity appears.

Unexpected links in messages claiming to come from 54 Below should be verified before they are opened. The identity-protection services and help line in the official notification letter should be used for incident-related support.