nd Swing Reports Data Breach Affecting Customer Information
nd Swing, a company operating in the wellness and lifestyle services sector, reported a data breach to Indiana regulators on May 7, 2026. The incident, which occurred on March 20, 2026, exposed various personal and account details. Affected individuals should review their accounts and take protective measures to safeguard their information.
- State
- Indiana
- Breach date
- March 20, 2026
- Reported
- May 7, 2026
What may have been exposed
- Full Name
- Email Address
- Mailing Address
- Date of Birth
- Password or Credential Hash
- Payment Card Information
- Purchase and Order History
- Membership Account Details
On May 7, 2026, nd Swing filed a data breach notification with Indiana authorities, confirming a security incident that took place on March 20, 2026. The company, which appears to operate in the wellness and lifestyle sector, reported the breach after an internal investigation. Details of the incident are based on public disclosures made to regulators.
The reported data exposure includes a range of sensitive customer information. Affected data types are Full Name, Email Address, Mailing Address, Date of Birth, Password or Credential Hash, Payment Card Information, Purchase and Order History, and Membership Account Details. This comprehensive list indicates a significant compromise of personal and transactional records entrusted to nd Swing.
Such an exposure carries substantial risks for individuals. Compromised Email Addresses and Password or Credential Hashes could lead to unauthorized access of online accounts, not just with nd Swing but potentially across other services if credentials were reused. The exposure of Payment Card Information, alongside Purchase and Order History, raises concerns about fraudulent transactions and identity theft risks.
Individuals who have received a notification about this incident from nd Swing should take immediate action. It is recommended to change passwords for their nd Swing account and any other online accounts where similar credentials may have been used. They should also monitor financial statements and credit reports for any suspicious activity. Placing a fraud alert or credit freeze with credit bureaus can add an extra layer of protection against misuse of personal information.
What to do if you were affected
Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Secure your online accounts
Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: Indiana Attorney General filing
Related data breach cases
- Teamsters Local 17
- Bank
- American Motorcyclist Association
- Deer Management Co. LLC dba Bessemer Venture Partners
- MEBS Global Reach
- McKenzie Creative Brands
- Midvale Indemnity and American Family Connect Insurance Company
- Nishiyamato Academy
- 9World Acceptance Corporation
- Chicago Psychoanalytic Institute
- Poppins Payroll Company
- Baltimore Medical System Inc
- Pavillon International Inc
- 7The Association of the Bar of the City of New York