2nd Swing disclosed a data security incident to the New Hampshire Attorney General on May 7, 2026, triggering legally mandated notification letters. If you are one of the people who received 2nd Swing's letter, your data may have been exposed and you could be entitled to compensation.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. Settlement amounts, claim deadlines, and opt-in/opt-out instructions appear here only when a public court record supports them. No outcome is estimated or guaranteed.
2nd Swing's filing with the New Hampshire Attorney General lists these compromised data types:
Each exposed category makes the claim stronger. Courts treat unauthorized disclosure of this information as actionable harm.
2nd Swing is a prominent specialty retailer within the golf equipment and apparel industry, well-known to enthusiasts for its extensive inventory of new and custom clubs, expert fitting services, and robust e-commerce operations. To facilitate seamless online shopping, custom fitting appointments, customer loyalty programs, and inventory management, the company routinely collects and stores a significant volume of personal identifiable information and sensitive financial records from its customer base nationwide. This commercial footprint requires the systematic handling of detailed customer profiles, making the enterprise a repository of valuable consumer data.
The security incident reported to the New Hampshire Attorney General in 2026 highlights the persistent vulnerabilities facing modern retail operations. Incidents of this nature typically involve sophisticated cyberattacks such as unauthorized access to customer databases, the deployment of ransomware, or compromises within third-party vendor platforms used for payment processing and fulfillment. In the retail sector, threat actors frequently target e-commerce infrastructure to intercept consumer transactions, harvest credentials, or exfiltrate customer relationship management databases containing historical purchase records and stored payment instruments.
The data compromised in retail breaches commonly includes full names, billing and shipping addresses, email addresses, phone numbers, and sensitive payment card details such as credit card numbers, expiration dates, and CVV codes. Exposure of this information creates severe risks for affected consumers, including unauthorized credit card charges, financial account takeover, and targeted phishing scams designed to exploit the relationship between the customer and the brand. Because retail profiles often link personal identifiers with specific purchasing habits, victims face an elevated long-term threat of identity theft and fraudulent schemes that leverage these specific data points.
As a commercial entity operating in the retail sphere, 2nd Swing has a legal duty under state consumer protection statutes, common law negligence principles, and Section 5 of the Federal Trade Commission Act to implement and maintain reasonable security measures to protect consumer data. This includes deploying robust encryption, regular vulnerability assessments, and strict access controls. The occurrence of a data breach strongly suggests a potential failure in fulfilling these statutory and common law obligations, raising serious questions about whether adequate safeguards were in place to prevent unauthorized intrusion.
Receiving a data breach notification letter from 2nd Swing serves as formal legal confirmation that your personal information was compromised due to corporate security failures. Legally, this notification provides affected consumers with the standing necessary to participate in a class action lawsuit aimed at securing compensation and mandating improved security practices. You do not need to demonstrate actual financial loss or fraudulent charges to take legal action, as the increased risk of future identity theft constitutes a recognized injury. Our firm handles these complex data privacy cases on a contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.
Eligibility is broader than most people expect: you do not have to prove money was stolen, only that your information was put at risk. You may qualify if any of these apply:
You received a data breach notification letter from 2nd Swing
You were a customer, patient, employee, or client of 2nd Swing
Your personal information was stored in 2nd Swing's systems
Your financial account, credit card, or banking information was disclosed
Your login credentials or passwords were exposed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Act quickly to protect your identity and preserve your claim. Four steps, in order:
Do not discard the 2nd Swing letter. It documents your standing as an affected individual — the foundation of any claim you file.
Check your 2nd Swing letter for credit-monitoring enrollment instructions and use them. Free monitoring catches fraud early and documents harm.
Freeze your credit with Equifax, Experian and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted whenever you need to apply for credit.
Deadlines apply to breach claims. A free review of your 2nd Swing letter takes minutes, and we only get paid if you do.
Security Incident
Prior to AG notification
Someone gained unauthorized access to data held in 2nd Swing's systems.
Reported to Attorney General
May 7, 2026
2nd Swing's disclosure was logged with the New Hampshire Attorney General's office.
Consumer Notification Letters Sent
Within weeks of AG filing
Notification letters are sent by mail to all individuals whose data was involved.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Compensation in a case like 2nd Swing's depends on where you live, what was exposed, and how the company responded. Common recovery categories:
Per-incident statutory damages may be available even without proof of fraud; California's $100–$750 statute is the leading example.
If the breach led to fraudulent charges or unauthorized transactions on your accounts, those losses are recoverable.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
Outlays for monitoring services and identity-restoration help belong in your claim.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
Other companies have notified the New Hampshire AG of breaches. Received one of these letters as well? You may have more than one claim.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris