# California Breach Notification Letter — §1798.82(d) Compliant Format

**NOTICE OF DATA BREACH**

Date: 28 March 2026

Dear [Individual Name],

## What Happened

On 13 March 2026, Stellar Payments Group discovered that an unauthorized party accessed our customer database systems between 10 March and 13 March 2026. The unauthorized access was the result of a cyberattack that exploited a compromised employee credential. We immediately took steps to contain the incident, engaged a leading cybersecurity firm to investigate, and reported the matter to law enforcement.

## What Information Was Involved

Our investigation determined that the following types of your personal information may have been accessed:
- Full name
- Email address
- Postal address
- Payment card number (last four digits) and transaction history
- Account balance

## What We Are Doing

We have taken the following steps in response to this incident:
- Immediately isolated the affected systems from our network.
- Engaged Mandiant, a leading cybersecurity firm, to conduct a comprehensive forensic investigation.
- Implemented enhanced security measures, including phishing-resistant multi-factor authentication and network segmentation.
- Notified the California Attorney General as required by law.
- Reported the incident to relevant federal and international regulatory authorities.

## What You Can Do

We recommend the following steps to help protect your information:

1. **Enroll in free credit monitoring**: We are offering 12 months of complimentary identity protection through Experian IdentityWorks. To enroll, visit stellarpayments.eu/breach-support and enter your activation code: [UNIQUE CODE]. Enrollment must be completed by 28 June 2026.

2. **Monitor your financial accounts**: Review your bank and credit card statements regularly for any unauthorized transactions.

3. **Place a fraud alert**: You may place a free fraud alert on your credit file by contacting any one of the three major credit reporting agencies:
   - **Equifax**: 1-800-525-6285 | equifax.com
   - **Experian**: 1-888-397-3742 | experian.com
   - **TransUnion**: 1-800-680-7289 | transunion.com

4. **Consider a security freeze**: You have the right to place a security freeze on your credit report at no cost under California law (Cal. Civ. Code §1785.11.2). A security freeze prohibits a credit reporting agency from releasing any information in your credit report without your express authorization.

5. **Obtain a free credit report**: You are entitled to a free copy of your credit report from each of the three major credit bureaus once every 12 months. Visit annualcreditreport.com or call 1-877-322-8228.

6. **Be wary of suspicious communications**: Do not respond to emails, calls, or texts claiming to be from Stellar Payments that ask for your password, full card number, or other sensitive information. We will never ask for this information.

## For More Information

If you have questions about this incident, please contact our dedicated breach response team:

- **Toll-free phone**: 1-888-555-0199 (Monday-Friday, 8:00 AM - 8:00 PM PT)
- **Email**: breach-support@stellarpayments.eu
- **Website**: stellarpayments.eu/breach-support
- **Mail**: Stellar Payments Group, Breach Response Team, 1200 17th Street NW, Suite 500, Washington, DC 20036

Our Data Protection Officer, Dr. Elena Vasquez, can also be reached at dpo@stellarpayments.eu.

Sincerely,

Marcus Lindqvist
Chief Executive Officer
Stellar Payments Group