Kindthread Data Breach Exposes Social Security Numbers

On June 7, 2024, 301 Scrubs Investors, LLC—doing business as Scrubs & Beyond and Kindthread—detected unauthorized activity within its computer network. The company brought in third-party forensic specialists to investigate the scope and nature of the incident. The investigation confirmed that an unauthorized individual gained access to data stored on the company’s network.

Following this, Kindthread conducted a thorough review to determine exactly what information was affected and which individuals were impacted. This review was completed on April 16, 2025.

The breach is significant due to the type of information exposed. The compromised data includes a range of personally identifiable information (PII) and protected health information (PHI): first and last names, dates of birth, Social Security numbers, driver’s license numbers, financial account information, passport numbers, medical information, health insurance information, and account usernames and passwords.

The breadth of the information exposed means that anyone notified by the company should take the situation seriously. For more details and to view the official notice, visit the Scrubs & Beyond data security incident page.

Kindthread's response

In response to the breach, Kindthread acted quickly to secure its network, reset all passwords, and secure all user accounts. The company also launched a comprehensive investigation and is mailing notification letters to potentially impacted individuals. Regulatory authorities are being notified as required by law. To further strengthen its defenses, Kindthread is reviewing and updating its cybersecurity policies and procedures, and providing additional data security training to employees.

If you have received a notification letter, it is important to remain vigilant. Kindthread encourages everyone to monitor their credit reports, account statements, and explanation of benefits forms for any suspicious activity or errors. You are entitled to one free credit report per year from each of the three major credit bureaus—TransUnion, Experian, and Equifax. Visit Annual Credit Report or call 1-877-322-8228 to request yours.

You may also consider placing a fraud alert or a credit freeze on your credit file, both of which are free of charge. A fraud alert can help protect you if someone tries to open credit in your name, while a credit freeze restricts access to your credit report entirely.

For more information, contact the credit bureaus directly:

• TransUnion: 1-800-680-7289
• Experian: 1-888-397-3742
• Equifax: 1-888-298-0045

For additional resources on identity theft, visit the Federal Trade Commission’s Identity Theft portal. If you suspect your information has been misused, file a report with the FTC, your state Attorney General, and local law enforcement.

For questions about the incident or the notification letter, you can reach Kindthread’s dedicated assistance line at 1-833-799-2825, Monday through Friday, 8:00 a.m. to 8:00 p.m. Eastern Time (excluding holidays).

To learn more about the company and its portfolio, visit the Kindthread website.