Shop FAN EXPO, which manages e-commerce and ticketing for pop culture events, notified the Maine Attorney General's office on June 5, 2026, about a data security incident. The company, known for catering to comic book, gaming, and entertainment convention attendees, handles a large volume of personal and transactional data through its online platform.
According to the filing, the breach compromised several categories of sensitive personal data. This includes customers' Full Name, Email Address, Password or Credential Hash, Mailing Address, Purchase and Order History, Payment Card Information, and Phone Number. The specific details of how the breach occurred are not fully clear, but such incidents often involve unauthorized access to online databases or compromised payment systems.
The exposure of these data types, particularly Payment Card Information alongside personal identifiers, creates significant risks. Affected individuals could face an elevated potential for unauthorized charges on their credit or debit cards, as well as an increased likelihood of targeted phishing scams and identity theft attempts. Monitoring financial statements and being cautious of unsolicited communications are immediate steps to take.
Companies like Shop FAN EXPO have a legal obligation to protect the sensitive data they collect from customers through robust security measures. The occurrence of a data breach of this nature suggests that these protective measures may have been insufficient, potentially exposing the company to claims of negligence for failing to safeguard customer information.
If you have received a data breach notification letter from Shop FAN EXPO, your private information was likely exposed. This notification provides the basis for understanding your legal options. Our firm is investigating this breach to determine if affected individuals may be able to pursue a class action lawsuit. You can learn more about your rights and whether you qualify for a free case review.