iBUYPOWER Data Breach Notification: What It Means for Your Personal Data

American Future Technology Corporation, widely recognized as iBUYPOWER for its gaming PCs and custom hardware, formally reported a security incident to the California Attorney General in June 2026. This breach affected consumer data due to a compromise of its digital infrastructure on June 21, 2025. As a prominent e-commerce technology retailer, iBUYPOWER processes substantial volumes of sensitive customer information.

The breach has been confirmed to involve specific categories of personal data. The compromised information may include your Full Name, Email Address, Mailing Address, Phone Number, Password or Credential Hash, Purchase and Order History, and Payment Card Information. It is crucial to note that these are the data types identified as potentially exposed.

Exposure of this information creates immediate risks for affected individuals. Your Full Name, Email Address, Mailing Address, and Phone Number can be used in targeted phishing scams or social engineering attacks. Compromised Password or Credential Hash data makes you vulnerable to credential stuffing across multiple online accounts, while access to Purchase and Order History and Payment Card Information can lead to unauthorized financial transactions and identity theft. Remaining vigilant against these threats is essential.

Under California law, including the California Consumer Privacy Act (CCPA) and the California Customer Records Act, American Future Technology Corporation d/b/a iBUYPOWER had a legal obligation to implement reasonable security measures to protect the personal data it collected. The occurrence of a data breach suggests that these critical security obligations may not have been fully met, potentially leaving vulnerabilities unaddressed in their systems.

If you received a data breach notification letter from iBUYPOWER, it serves as formal acknowledgment that your private information was compromised due to a security failure. We advise you to carefully review your notification letter, monitor your financial accounts and credit reports for any suspicious activity, and change passwords for any accounts that may have used similar credentials.

Receiving this notification also provides you with legal standing. Consumer protection laws recognize that the mere exposure of your private data can constitute a compensable injury, even if you haven't yet suffered direct financial loss. Understanding your legal rights and options is an important next step in protecting yourself.