Cotton Data Breach (2026): What Was Exposed & What to Do

✅ Official notice on file. Cotton Incorporated filed this data breach notice with the California Attorney General on Nov 2, 2026. Compare it with the letter you received: the official copy is linked below.

View the official notice · Read the letter (PDF)

Cotton Incorporated reported a data breach. The information involved includes username / password, email address, home address.

Key facts

Data exposed Username / password, Email address, Home address
Reported to California AG Nov 2, 2026
Company helpline 1-800-952-5225

What to do now

  1. Change the password on this account and on any other site where you reused it, and turn on two-factor authentication.
  2. Expect targeted phishing that mentions this incident: do not click links in unexpected emails about the breach.
  3. Get your free credit reports at AnnualCreditReport.com and look for accounts you do not recognize.
  4. Call the Cotton Incorporated helpline at 1-800-952-5225 if you have questions about your letter.

Other recent data breaches

Source: notification letter and filing submitted by Cotton Incorporated to the California Attorney General. BreachLetter is not affiliated with Cotton Incorporated. Details extracted from the official letter; always follow the instructions in your own copy.