Click2Mail, a cloud-based print-to-mail service operated by C2M, LLC, reported a data security incident to the Vermont Attorney General's Office in September 2026. The underlying incident was first reported in mid-2026, and some customers are being notified.
Public reporting indicates that payment card information, specifically debit card checkout details, was exposed. The exact number of affected individuals has not been fully disclosed, though it is described as a small number of Vermont residents. There is no public confirmation of SSNs or medical data being involved.
Additional details about the breach, including a precise headcount, a full list of affected states beyond Vermont, and other potential data categories, have not yet been publicly released. Official notification letters to customers may contain more specific information.