Data Breach Alert: Cal Spas
In today’s digital age, data breaches have become alarmingly common, impacting businesses and consumers alike. Recently, Cal Spas, a well-known manufacturer of premium hot tubs and outdoor lifestyle products, experienced a significant data breach that has raised concerns among its customers and stakeholders. This blog post provides an overview of the incident, the company involved, and what affected parties should consider moving forward.
About Cal Spas
Cal Spas, headquartered in California, USA, is a leading manufacturer of hot tubs, swim spas, and outdoor home-resort products. Known for their commitment to quality and innovation, Cal Spas distributes its premium products globally through a network of specialty dealers. The company has established a strong reputation in the industry, making this breach particularly concerning for its customers and partners.
What Happened
The data breach was discovered on January 5, 2026, when it became evident that unauthorized access had been gained to Cal Spas’ systems by a threat actor known as Qilin. While the exact size of the data leak remains unknown, the implications for affected customers could be significant. This incident highlights the growing threat that businesses face in safeguarding sensitive information against cybercriminals.
Next Steps
If you believe you may have been affected by the Cal Spas data breach, it is crucial to take immediate action. We encourage all impacted parties to reach out to us at Srourian Law Firm (SLF) to discuss your options and understand your legal rights. Our team is here to provide guidance and support during this challenging time.
LINKS:

Srourian Law Firm is investigating a potential class action lawsuit against Cal Spas for a recent data breach.
If you received a NOTICE OF DATA BREACH letter from Cal Spas, complete the form below so we can discuss your legal options.
Submit Your Information
