Corpay, Inc. data breach

Clerk's notes

Corpay, Inc., a prominent global leader in corporate payments and B2B financial technology, formally reported a security incident to the Office of the Texas Attorney General on September 25, 2026. This breach, which occurred on November 17, 2025, involved an unspecified compromise within its systems, impacting the sensitive personal and financial information the company manages for its clients and their employees.

The compromised data categories are extensive and highly sensitive. They include Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Corporate Financial Records, Transaction History, and Mailing Address. The exposure of such a wide array of personal and financial identifiers creates substantial risk for individuals, potentially leading to identity theft, financial fraud, and unauthorized access to banking accounts.

As a financial technology and payment processing institution, Corpay, Inc. is obligated to uphold rigorous data security standards to protect the vast amounts of confidential information it handles. These obligations are set forth by federal and state regulations designed to ensure the integrity and privacy of personal and corporate financial data. A breach of this scope suggests potential vulnerabilities in the administrative, technical, or physical safeguards intended to prevent unauthorized disclosure.

If you have received a data breach notification letter from Corpay, Inc., it means your confidential information was identified as compromised in this incident. Receiving this notification is a critical first step in establishing your legal standing. Understanding your rights and options is important, and you can request a free case review to learn more about the legal avenues available to you without any upfront cost.

If a notification letter about this breach reached you, see every Texas data breach on file or browse all cases.