Stitch Data Breach

Stitch, an online community for people over 50, reported a data breach involving names, dates of birth and medical information. Texas alone counts 4,062 affected residents, and the company has not said how many people were affected in total.

Stitch Connect, Inc. runs Stitch (stitch.net), a companionship, social events and travel community for people over 50. The company lists a San Francisco, California address. On October 16, 2026, the Texas Attorney General published Stitch Connect’s data breach report. The report says Stitch notified affected people by email.

What Stitch Reported to Texas

According to the Texas Attorney General’s data breach reports, the information involved includes names, dates of birth and medical information. The report lists 4,062 affected Texans.

The Texas report does not say when the breach happened, when Stitch discovered it, or how it happened. As of October 19, 2026, no public notice letter or company statement about the incident could be found.

Stitch has not disclosed the total number of people affected. Texas counts only its own residents, so 4,062 is a floor, not a total. Stitch members in other states may also be affected.

Source: Texas Attorney General Data Security Breach Reports (published October 16, 2026).

Why Medical Information on a Social Site Raises the Stakes

Most people do not expect a social or travel community to hold medical details. Stitch has not explained what “medical information” means in its case. It could include health details members shared, but the company has not said.

Medical information is personal and hard to take back once it is out. Paired with a name and date of birth, it can be used in targeted scams. Older adults are frequent targets of fraud, and criminals often use personal details to make a scam sound real.

What Information Was Exposed?

Based on Stitch Connect’s report to the Texas Attorney General, the information involved includes:

• Names
• Dates of birth
• Medical information (not further described in the report)

What Is Stitch Offering Affected Members?

Stitch has not publicly disclosed whether it is offering credit monitoring or identity protection. Anyone who received a notice email should check it for an offer, an enrollment code and a deadline.

Your Information Is at Risk

Exposed medical details and birth dates can be used for scams, phishing and, in some cases, medical identity theft. Medical identity theft happens when someone uses another person’s identity to get care, drugs or insurance payments.

Affected individuals can take these steps:

• Read the notice email from Stitch and save a copy.
• Review health insurance statements and Explanation of Benefits forms for care that was not received.
• Be careful with calls, texts or emails that mention health details or the Stitch breach.
• Pull free credit reports at www.annualcreditreport.com.
• Change the Stitch password and any other account that uses the same password.

Do You Have Legal Options?

Companies that collect sensitive personal and medical information from their members have a legal obligation to protect it. When that obligation is not met, affected individuals may have legal rights and remedies. A Free Case Review can help them understand their options.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review. 

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that collect and store this information are expected to safeguard it. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

Frequently Asked Questions

How many people were affected by the Stitch data breach?

Stitch has not disclosed a total. Its report to the Texas Attorney General lists 4,062 Texans. Members in other states may also be affected.

What information was exposed?

According to the Texas report:

• Names
• Dates of birth
• Medical information

What does “medical information” mean here?

Stitch has not explained. Check your notice email for details about what information was involved for you.

When did the breach happen?

Stitch has not said. The Texas Attorney General published the report on October 16, 2026.

What should I do if I received a notice?

• Save the notice email.
• Watch your health insurance statements for care you did not get.
• Change your Stitch password and any reused passwords.
• Check your credit reports at www.annualcreditreport.com.
• Request a Free Case Review from Emery | Reddy.

How can I protect myself from scams after a medical data breach?

Scammers may pose as a doctor’s office, an insurer or Medicare and mention real health details to gain your trust. Do not give out personal or insurance information to anyone who contacts you first. Hang up and call the number on your insurance card or your provider’s official website.

Do I have a legal claim?

Companies that hold your personal and medical information have a duty to protect it and to tell you promptly when it may have been exposed. If you received a notice from Stitch, you may have legal rights. Contact Emery | Reddy at 916.995.5968 or visit emeryreddy.com for a Free Case Review to see what you may qualify for. No Fee Unless We Recover.