Data Breach

Lovesac Data Breach Lawsuit Investigation

If you were affected by the The Lovesac Company data breach, you may be entitled to compensation.
Updated on
Published on
Lovesac Data Breach Lawsuit Investigation
Lovesac Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the The LoveSac Company data breach.

If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.

About The LoveSac Company

The LoveSac Co. is an American furniture retailer, known for producing modular furniture systems called Sactionals and its signature foam-filled bean bag chairs known as Sacs. Founded in 1998 in Utah, the company has over 200 retail showrooms across the United States and a strong online presence.

LoveSac is headquartered in Stamford, Connecticut, and employs more than 1,000 people.

What happened?

On or around May 30, 2025, The LoveSac Co. discovered suspicious activity within its email environment. An investigation revealed that an unauthorized actor had accessed an employee email account between May 27, 2025 and May 30, 2025. It was determined that sensitive information contained in emails and attachments could have been accessed.

A ransomware group called RansomHub claimed responsibility for the breach and stated on the dark web that they had accessed 40 GB of company data, threatening to publish it if their demands were not met. Lovesac began notifying affected individuals by mail on Sept. 4, 2025.

Information Exposed

  • Name
  • Social Security number

The cybersecurity incident was reported to the Maine, Massachusetts, New Hampshire and Vermont Attorney Generals' offices beginning on Sept. 4, 2025.

Your Rights and Next Steps

If you received a data breach notice from LoveSac, you have important rights and options. You may be entitled to seek compensation for any harm or inconvenience caused by this cybersecurity incident.

  • Credit monitoring services: Enroll in the 24 months of free Experian IdentityWorks credit monitoring services, provided by Lovesac.
  • Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
  • Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
  • Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.

You May Be Entitled to Compensation

If your personal information was exposed in the LoveSac data breach, you may be eligible for compensation, which could include reimbursement for out-of-pocket expenses, time spent addressing the breach, or payment for emotional distress. Class action lawsuits can help affected individuals recover damages for losses or risks resulting from the breach.

To find out if you are eligible and to join the lawsuit, complete the form below.

Sources

SUBMIT YOUR CLAIM TO THE LAW FIRM HANDLING THIS INVESTIGATION