Were writing to inform you about a data security incident that may get exposed some of your personal information. For this reason, we are contacting you directly to explain the circumstances of the incident and the outcome of our investigation. What happened? in mid-January, JoFit first learned that its website may have been the mark of a cybersecurity attempt aimed at acquiring customer credit card information. On the same day that we received this information, JoFit began act to investigate and submit any necessary corrective steps. In that process, we confirmed that there was a vulnerability in the website that could make resulting in exposure of personal information. Within days of first learning of the incident, we notified law enforcement of this incident, and we hired an independent computer forensics consultant that specializes in cybersecurity. The consultant is investigating precisely what happened, what information may make been compromised, and what additional steps are needed. What information was involved? The information that may experience been compromised included first name, last name, and credit card payment information. What we are doing. JoFit is continuing its investigation of the situation. in the meantime, piece our investigation is ongoing, we experience engaged Epiq Corporate Services, Inc. (EPIQ) to supply identity monitoring at no cost to you for i year. Please survey the enclosed EPIQ family Secure section included with this letter for information on how to activate your complimentary identity monitoring services.More information: https://oag.ca.gov/ecrime/datahack/reports/sb24-66446