Virgo Gems Data Breach Lawsuit

Customers who bought crystals or minerals on the Virgo Gems website between August 4 and September 21, 2026 may have had their card number, expiration date and security code stolen.

What Happened at Virgo Gems

Virgo Gems, LLC is an online crystal and mineral retailer based in Evergreen, Colorado.

According to its notice letter, Virgo Gems detected suspicious activity on its website on September 21, 2026. An investigation found that payment card information from certain transactions between August 4 and September 21 may have been taken. The company determined which customers were affected on September 23 and mailed letters on October 1, 2026.

How the Card Theft Worked

The company says investigators found “unauthorized code” on its website and removed it. This type of attack is often called digital skimming: hidden code copies card details as customers type them at checkout and sends them to criminals. The purchase still goes through, so customers usually notice nothing.

Virgo Gems says it shut down online sales when it found the problem, reported the incident to the FBI and notified the card brands. It moved quickly once it found the code. The skimming code, however, ran for about seven weeks before it was found.

Virgo Gems has not disclosed the total number of customers affected. State filings list 20 Massachusetts residents, about 4 New Hampshire residents and 2 Vermont residents.

What Information Was Exposed?

According to the notice letter, the information may have included:

• First and last name
• Payment card number
• Card expiration date
• Card security code

What Is Virgo Gems Offering?

The letter does not offer credit monitoring. It encourages customers to review their card statements and to ask their bank for a replacement card, which it calls “the single most effective step.”

Questions go to 1-833-788-9712, Monday through Friday, 7:00 a.m. to 7:00 p.m. Mountain Time.

Your Card Information Is at Risk

A card number with its expiration date and security code is everything a criminal needs to shop online. Stolen card data is often sold in bulk within days.

Affected customers can take these steps:

• Ask their bank for a new card number
• Review statements from August 2026 forward
• Dispute any charge they do not recognize right away
• Watch for emails or texts claiming to be from Virgo Gems or a bank about this incident

Do You Have Legal Options?

Online stores that take card payments have a legal obligation to keep their checkout pages secure and to protect customer card data. When that obligation is not met, affected individuals may have legal rights and remedies worth discussing with an attorney. Emery | Reddy is investigating this incident on behalf of people who received a notice letter.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review. No Fee Unless We Recover. Call 916.995.5968.

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

Frequently Asked Questions

How many people were affected by the Virgo Gems data breach?

Virgo Gems has not said. State filings list 20 people in Massachusetts, about 4 in New Hampshire and 2 in Vermont. The full number is not public.

What information was exposed?

• Your name
• Your card number
• Your card’s expiration date and security code

Is Virgo Gems offering credit monitoring?

No. The letter does not offer monitoring. It recommends asking your bank for a replacement card.

What is digital skimming?

Digital skimming is hidden code placed on a store’s checkout page. It copies card details as you type them and sends them to criminals, while your order goes through normally.

What should I do if I received a letter?

• Ask your bank for a new card.
• Check your statements for charges you did not make.
• Be careful with messages about this incident that ask for information.
• Save your letter and talk with an attorney about your options.

Do I have a legal claim?

You may. Businesses that take card payments online have a duty to keep their checkout secure and to protect your card data. If you received a Notice of Data Breach letter from Virgo Gems, contact Emery | Reddy at 916.995.5968 or visit emeryreddy.com for a Free Case Review to see what you may qualify for. No Fee Unless We Recover.