Here’s the complete email I received from CafePress
FYI as an example CafePress is the vendor that we would buy the Stove bolt calendars from.
Dear Valued Customer,
We are writing to notify you of a data security incident involving your personal information. This email explains what happened and provides information about what you can do in response. We are taking this matter very seriously and sincerely regret any concern it may cause you.
CafePress recently discovered that an unidentified third party obtained customer information, without authorization, that was contained in a CafePress database. Based on our investigation to date, this may have occurred on or about February 19, 2019.
What Information Was Involved
The information may have included your name, email address, the password to your CafePress account, and other information (physical address, phone number, and in a small number of cases, only the last four digits of your credit number and credit card expiration date).
What We Are Doing
We have been diligently investigating this incident with the assistance of outside experts. We also have contacted and are cooperating with U.S. federal law enforcement authorities. In addition, we have taken various steps to further enhance the security of our systems and your information, and the affected database has been moved to a different environment.
What You Can Do
As described in the "Additional Resources" section below, we recommend you remain vigilant and take steps to protect against identity theft or fraud, including monitoring your accounts and free credit reports for signs of suspicious activity.
We also recommend that you visit the CafePress website at www.cafepress.ca
and log in to any online account you may have, which should prompt you to change your account password, if you have not done so recently. In general, you should always ensure that you are not using the same password across multiple accounts, and that you are using strong passwords that are not easy to guess.
For More Information
If you have any questions or concerns for CafePress, please contact: 1-866-450-4251. The Support Line is available 24 hours a day, 7 days a week.
We are fully committed to protecting your information, and we deeply regret that this incident occurred.
You may obtain a copy of your credit report to check if it includes any unauthorized activity. This may be free, depending on the circumstances. Three credit reporting bodies offering this service are:
You can contact these credit bureaus to place a "fraud alert" on your credit file that alerts creditors to take additional steps to verify your identity prior to granting credit in your name. When one credit bureau confirms your fraud alert, the others are notified to place fraud alerts on your file.