from what i know, if you had an ID uploaded to the site for age verification, you were hacked. the banking, passwords, etc were not. i never did get a letter because i never uploaded anything to their site. i just put an order in over Memorial Day for some Apex Tactical stuff. i will continue to shop with them. getting hacked can happen to any company.