Check City data breach

Clerk's notes

Check City, a financial services provider, filed a data breach report with Oregon state authorities on March 19, 2026. This report concerns an incident that took place nearly a year prior, on March 21, 2025. The status of this breach is currently listed as 'monitoring' by the involved parties.

The breach involved a significant scope of personal and financial information. Data potentially exposed includes Full Name, Social Security Number, Date of Birth, Financial Account Number, Bank Routing Number, Loan and Transaction History, Government-Issued ID Number, Home Address, and Phone Number. As a company dealing in consumer lending and financial transactions, Check City routinely handles such sensitive customer details.

Compromise of these data types carries substantial risks for affected customers. The exposure of identifiers like Social Security Numbers and bank account details can lead to severe and long-lasting consequences, including potential financial account takeovers, fraudulent credit applications, and identity theft. Unlike a credit card, these core identifiers cannot be easily changed, leaving individuals vulnerable for an extended period.

Financial institutions like Check City are legally obligated to implement robust security measures to protect customer data under various regulations. A breach of this nature suggests that these safeguards may have been insufficient, potentially failing to meet the required standard of care to prevent unauthorized access to sensitive consumer information.

If you have received an official data breach notification letter from Check City, it signifies that your private information was likely compromised. Understanding your legal rights and options is crucial. A free case review can help determine if your specific situation warrants further action to address the potential harms and seek accountability for the data exposure.

If a notification letter about this breach reached you, see every Oregon data breach on file or browse all cases.