Almeida Law Group is investigating a data breach at Glucobit Inc. The breach occurred on May 1st, 2026. If you were affected, contact Almeida Law Group.
About Glucobit Inc.
Glucobit, Inc. operates under the trade name Reframe. Reframe is an alcohol reduction app that uses neuroscience and psychology to help users cut back on or quit drinking. The platform offers an evidence-based education program, daily tasks, progress tracking, live meetings, a private community, meditations, and one-on-one coaching. Founded in 2018 and a Y Combinator Summer 2021 alumnus, the company reports more than two million users. It is headquartered at 6120 Windward Pkwy, #165, Alpharetta, GA 30005, and is also listed by Y Combinator as being located in Atlanta, GA. Because the app collects personal information that users upload as part of their wellness journey, the nature of the data involved in any breach of this platform carries particular sensitivity.
What Happened?
Glucobit Inc. was listed in a California Attorney General sample breach notice filed on June 30th, 2026. According to the notice, a single system was accessed without authorization on or around May 1st, 2026. Before Reframe was able to stop the activity, some personal information that users had uploaded to the platform was downloaded without authorization. Reframe states it engaged cybersecurity experts to investigate and confirmed the limited scope of the issue.
The specific data types involved are not enumerated in the publicly available sample notice — that field is left blank to be personalized per individual recipient. However, the notice explicitly states the incident did not involve passwords, home or mailing addresses, payment card or financial information, Social Security numbers, driver’s license numbers, or other government identifiers. Notably, the notice advises users to be cautious of any unsolicited communications referencing “health, wellness, or personal habits,” which is consistent with the nature of the Reframe platform, though the notice does not explicitly confirm that wellness or habit-tracking data was compromised. Reframe is offering 12 months of complimentary credit monitoring and dark web monitoring through TransUnion, provided by CyberScout, at no cost to affected users. A dedicated call center has been established at 1-844-593-7750, available Monday through Friday, 8 a.m. to 8 p.m. ET, excluding major U.S. holidays. No ransomware group claims, threat actor attributions, or independent security reporting about this incident have been identified, and no prior data breaches involving Glucobit or Reframe were found in any breach tracker or media source.
Key Facts at a Glance
- Company or Organization: Glucobit, Inc. (d/b/a Reframe)
- Industry: Mental Health Tech / Consumer Health Services (alcohol reduction and habit-change app)
- Location: Alpharetta, GA
- Incident type: Unauthorized access and download of personal information from a single system
- Date of breach: May 1st, 2026
- Date of consumer notification: June 30th, 2026
- Identity theft protection offered: 12 months of TransUnion credit monitoring and dark web monitoring via CyberScout
- Source: California Attorney General sample breach notice — https://oag.ca.gov/ecrime/databreach/reports/sb24-625744; Y Combinator company profile — https://www.ycombinator.com/companies/reframe; Breach notice PDF — https://oag.ca.gov/system/files/Reframe%20-%20Sample%20Consumer%20Notice.pdf
What Should You Do?
If you received a notice from Reframe, enroll in the complimentary 12-month TransUnion credit monitoring and dark web monitoring service as soon as possible using the instructions included in your notice. You may also want to place a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent new accounts from being opened in your name. Review your account statements regularly for any suspicious activity, and obtain a free copy of your credit report at AnnualCreditReport.com. Be especially alert to unsolicited emails, text messages, or phone calls that reference your health, wellness, or personal habits, as these could be phishing or social-engineering attempts. If you suspect your information has been misused, visit IdentityTheft.gov for step-by-step guidance on reporting and recovery.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
