Data Breach

Compound Solutions Data Breach Lawsuit Investigation

If you were affected by the Compound Solutions data breach, you may be entitled to compensation.
Updated on
Published on
Compound Solutions Data Breach Lawsuit Investigation
Compound Solutions Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Compound Solutions, Inc. data breach.

If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.

About Compound Solutions

Compound Solutions Inc. operates in the health, wellness and fitness industry as a supplier and distributor of nutraceutical ingredients. Founded in 1998 in California, the company provides science-backed, proprietary ingredients to nutrition and wellness brands worldwide.

Compound Solutions is known for distributing patented and trademarked ingredients designed to improve human health and performance. The company also offers services such as formulation support, marketing assistance, organoleptic testing, same-day sample shipping, global warehousing and market trend analysis.

What happened?

On Feb. 28, 2025, Compound Solutions detected unauthorized access to its network. After a forensic review, it was determined on Sept. 17, 2025, that an unauthorized actor may have accessed and/or acquired certain files containing personal and possibly medical information between Feb. 27 and Feb. 28, 2025.

The ransomware group known as PLAY claimed responsibility for the attack and threatened to publish the compromised data on the dark web. According to their statement, the stolen data included confidential company and client documents, payroll, accounting, tax records, IDs and financial information.

Possible Exposed Information

  • First and last name
  • Contact information
  • Date of birth
  • Social Security number
  • Driver's license number
  • Health insurance information
  • Financial account information

Compound Solutions began mailing data breach notices to affected individuals on Oct. 8, 2025. The cybersecurity incident was reported to the Massachusetts Attorney General’s office on Oct. 9, 2025.

Your Rights and Next Steps

If you received a notice from Compound Solutions, your information may have been compromised. Even if you have not seen evidence of misuse, it is important to take proactive steps to protect yourself.

Here are recommended steps:

  • Credit monitoring services: Enroll in the free IDX credit monitoring services, offered by Compound Solutions.
  • Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
  • Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
  • Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.

You May Be Entitled to Compensation

Lawyers are ready to help individuals affected by the Compound Solutions data breach. You may be eligible for compensation, which could include reimbursement for out-of-pocket expenses, time spent addressing the breach, or payment for emotional distress.

Completing the form below is the first step to protecting your rights and pursuing a claim.

Sources

SUBMIT YOUR CLAIM TO THE LAW FIRM HANDLING THIS INVESTIGATION