Did Corpay, Inc. have a data breach?

In plain terms

Corpay, Inc. formally reported a data security incident to the Vermont Attorney General on September 21, 2026. The breach involved the exposure of sensitive personal and financial data, though the specific breach type remains unspecified. Individuals who receive official notification should understand the implications for their exposed information.

Corpay, Inc., a global corporate payments and B2B financial technology company, filed a data breach notification with the Vermont Attorney General on September 21, 2026. The company's report indicates a data security incident, although the specific nature of how the breach occurred was not detailed in the filing. An investigation into the incident is currently monitoring the situation.

The public filing confirms that the data exposure from this incident includes Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, Mailing Address, and Email Address. This combination of personal and financial identifiers carries a risk of identity theft and financial fraud.

For those affected, receiving a notification letter confirms that your information was involved in this security incident. Such notifications are intended to inform individuals about the specific data types that may have been compromised during the breach.

As a general precaution, it is recommended to remain vigilant for any suspicious account activity. Consider reviewing financial statements and credit reports regularly. Placing a fraud alert or security freeze on your credit files with the three major credit bureaus (Equifax, Experian, and TransUnion) can also help prevent unauthorized access to your credit.

This information is based on Corpay, Inc.'s official filing with the Vermont Attorney General and is provided to help individuals confirm the reported data breach and understand the types of information affected.