2nd Swing, a company operating in the wellness and lifestyle sector, recently reported a data breach to the Indiana Attorney General's office on May 7, 2026. The incident, which occurred on or around March 20, 2026, has raised concerns for individuals who entrusted their personal information to the organization.
The reported data exposure includes Full Name, Email Address, Mailing Address, Date of Birth, Password or Credential Hash, Payment Card Information, Purchase and Order History, and Membership Account Details. For many, this combination of details can be particularly problematic, as it touches upon both personal identity and financial security.
Having this type of information compromised can open the door to various risks. Exposed email addresses, names, and passwords can be used in phishing scams or to access other online accounts. Payment card information, even if partially obscured, can still be exploited, while purchase histories could be used to craft more convincing social engineering attacks against victims.
Companies like 2nd Swing have a legal responsibility to protect the consumer data they collect. A breach suggests that security measures may have been insufficient to prevent unauthorized access. Consumers who receive a notification letter about such an incident may have grounds to seek accountability and potential compensation for the risks and consequences they face.
If you have received an official data breach notification letter from 2nd Swing, it serves as direct confirmation that your private information was compromised. Receiving this notice often means you have a legal standing to explore your options. Our firm is currently reviewing potential legal claims for individuals affected by this incident. We offer a free, no-obligation case review to help you understand if you qualify for legal action.