You are eligible for legal review if you received a direct data-breach letter from CodeSecure naming your information as affected. CodeSecure is the technology company that held the data, and a class action is a lawsuit in which a group of people seek payment together. CodeSecure suffered unauthorized system access on September 15, 2025. According to Console & Associates, the intruder viewed or copied stored personal information after an investigation confirmed the intrusion investigation report.
Official resources:
- Read the official guidance from Usa — Use this primary source to verify the official guidance.
- Check eligibility on Databreachclassaction’s official study page — Use this page to check the study’s participation requirements.
Table of Contents
- What happened and when did notices appear?
- What personal information was involved?
- Who can seek review and what is the case status?
- What should you do now?
What happened and when did notices appear?
The investigation concluded the access occurred in September 2025. The attacker viewed or copied personal information stored in CodeSecure systems. A CodeSecure breach notice appeared on the Vermont Attorney General's security-breach list on October 28, 2026.
According to Class Action U reporting, that listing came more than a year after the September 2025 access breach listing. Vermont law requires companies to report breaches affecting residents' private data to the Attorney General. The Vermont Attorney General says sample consumer notices can be requested at [email protected].
What personal information was involved?
According to Console & Associates, the exposed data reportedly included Social Security numbers, medical and health information, and login credentials. That combination can support identity theft, medical fraud, and account takeover.
Social Security numbers can be used to open new accounts. Login credentials can be used to try other accounts when people reuse passwords. Health information can be used for false medical claims or targeted scams.
Who can seek review and what is the case status?
People eligible to seek review are those who received a direct notification letter from CodeSecure identifying their information as affected, according to Console & Associates eligibility review details. Keep that letter because it ties you to the incident.
That same Console & Associates review explains that no certified CodeSecure class action or settlement is documented. Current pages describe only lawyer investigations and a free, no-obligation eligibility review for possible compensation claims.
What should you do now?
According to Console & Associates, breach victims should monitor accounts, use fraud alerts or freezes, watch for phishing that references the breach, change passwords and add two-factor authentication, and keep the notification letter. A free credit freeze restricts creditor access to prevent new accounts. According to USAGov, it must be placed separately with Equifax, Experian, and TransUnion online, by phone, or by mail credit freeze guidance.
- Check bank, credit, insurance, and patient-portal statements for unknown activity.
- Place a fraud alert or freeze, watch for breach-themed phishing calls and emails, and change exposed passwords.
- Turn on two-factor authentication on email, banking, and health accounts.
- Save the CodeSecure letter and note any fraud, time spent, and costs.