American Future Technology Corporation d/b/a iBUYPOWER disclosed a data security incident to the California Attorney General on June 12, 2026, triggering legally mandated notification letters. If you are one of the people who received American Future Technology Corporation d/b/a iBUYPOWER's letter, your data may have been exposed and you could be entitled to compensation.
The California Attorney General filing confirms the breach notice — not a court case. Settlement amounts, claim deadlines, and opt-in/opt-out instructions appear here only when a public court record supports them. No outcome is estimated or guaranteed.
American Future Technology Corporation d/b/a iBUYPOWER's filing with the California Attorney General lists these compromised data types:
Each exposed category makes the claim stronger. Courts treat unauthorized disclosure of this information as actionable harm.
American Future Technology Corporation, widely known and operating under the premier gaming PC and custom hardware brand name iBUYPOWER, stands as a prominent direct-to-consumer technology retailer and systems integrator. Specializing in high-performance desktop computers, custom gaming rigs, and computer components, the company serves a vast consumer base across the United States. Because iBUYPOWER operates heavily through e-commerce platforms, custom online configurators, and direct digital sales channels, it routinely collects, processes, and stores substantial volumes of sensitive consumer data. This includes customer names, billing and shipping addresses, telephone numbers, encrypted payment card details, and account credentials required to manage purchases, warranties, customer service inquiries, and loyalty rewards.
In 2026, American Future Technology Corporation formally reported a security incident to the California Attorney General, alerting consumers and regulatory authorities to a significant compromise of its digital infrastructure. While specific investigative details regarding the precise intrusion vector continue to be evaluated, breaches affecting major e-commerce technology retailers and system builders typically involve sophisticated cyberattacks such as unauthorized access to customer database servers, malicious code injections designed to skim payment information during checkout, credential stuffing campaigns, or compromises of third-party vendor platforms integrated into the company's supply chain and online storefront.
The exposure of consumer data in a retail technology breach creates immediate and severe risks for affected individuals. Compromised personally identifiable information—such as full names, mailing addresses, email addresses, and stored account passwords—leaves consumers vulnerable to targeted phishing campaigns, credential-stuffing attacks across multiple platforms, and identity theft. Furthermore, if transaction histories and payment card details were accessed, victims face the alarming prospect of unauthorized credit card charges, financial fraud, and the arduous process of securing banking accounts. The unauthorized release of this sensitive information strips consumers of their digital privacy and forces them into a prolonged state of vigilance against ongoing financial threats.
As a commercial entity operating within California, American Future Technology Corporation d/b/a iBUYPOWER had a strict legal obligation under state law—including the California Consumer Privacy Act (CCPA) and California Customer Records Act—alongside established common-law duties, to implement and maintain reasonable security procedures and practices appropriate to the nature of the personal information collected. These statutory and common-law mandates require companies to safeguard consumer data against unauthorized access, destruction, use, modification, or disclosure through robust encryption, regular network vulnerability assessments, and strict access controls. The occurrence of a data breach of this magnitude serves as a strong indicator that the company may have failed to uphold these critical security obligations, potentially leaving vulnerabilities unaddressed in its digital architecture.
Receiving an official data breach notification letter from American Future Technology Corporation d/b/a iBUYPOWER is a formal acknowledgment that your private information was compromised due to corporate security failures. Legally, this notification provides affected consumers with the standing necessary to participate in a class action lawsuit aimed at holding the company accountable for its inadequate data protection practices. Under consumer protection laws, you do not need to prove that you have already suffered actual financial loss or identity theft to seek legal redress; the mere exposure of your private data creates a compensable injury. Our law firm investigates data breach cases on a contingency fee basis, meaning you pay absolutely nothing out of pocket, and we only recover fees if we successfully secure a financial recovery on your behalf.
Notification Delay: Approximately 12 months elapsed between the reported date of the security incident and the company's notification to the Attorney General. Courts have found that excessive notification delays independently support legal claims.
Eligibility is broader than most people expect: you do not have to prove money was stolen, only that your information was put at risk. You may qualify if any of these apply:
You received a data breach notification letter from American Future Technology Corporation d/b/a iBUYPOWER
You were a customer, patient, employee, or client of American Future Technology Corporation d/b/a iBUYPOWER
Your personal information was stored in American Future Technology Corporation d/b/a iBUYPOWER's systems
Your financial account, credit card, or banking information was disclosed
Your login credentials or passwords were exposed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Four moves to make now — they protect both your identity and your legal position:
Keep the American Future Technology Corporation d/b/a iBUYPOWER letter. It is the document that proves you were part of this breach; a claim without it is weaker. Store a scanned backup.
American Future Technology Corporation d/b/a iBUYPOWER typically offers free credit monitoring to affected individuals. The enrollment code is usually in the letter — activate it even if you see no signs of fraud.
Contact the three credit bureaus and request free credit freezes. This stops identity thieves from opening accounts in your name while leaving your existing accounts untouched.
Claims windows close. Our team reviews American Future Technology Corporation d/b/a iBUYPOWER breach cases free of charge and works on contingency — you pay nothing unless we recover for you.
Security Incident
2025-06-21
American Future Technology Corporation d/b/a iBUYPOWER's systems were compromised, exposing stored personal records.
Reported to Attorney General
June 12, 2026
American Future Technology Corporation d/b/a iBUYPOWER filed its official breach notice with the California Attorney General.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
A statute-of-limitations clock is running on this type of claim.
Compensation in a case like American Future Technology Corporation d/b/a iBUYPOWER's depends on where you live, what was exposed, and how the company responded. Common recovery categories:
Statutory damages exist independent of out-of-pocket loss — California's $100–$750 range is the model other states have followed.
If the breach led to fraudulent charges or unauthorized transactions on your accounts, those losses are recoverable.
The time you lost to credit freezes, fraud disputes, and account monitoring counts as a recoverable inconvenience.
If you paid for credit monitoring or identity protection after the breach, those costs can be recovered.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
California's Consumer Privacy Act (CCPA) and Consumer Privacy Rights Act (CPRA) provide residents with among the strongest data breach rights in the nation, including statutory damages of $100–$750 per consumer per incident.
Other companies have notified the California AG of breaches. Received one of these letters as well? You may have more than one claim.
Kern County Superintendent of Schools
California · Oct 2026
JM Bullion, Inc.
California · Oct 2026
American Board of Preventive Medicine
California · Oct 2026
Tulare Joint Union High School District
California · Oct 2026
Magna Hospitality Group
California · Oct 2026
Porter and Company
California · Oct 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris