Sapp Bros., Inc. data breach
Sapp Bros., Inc. officially reported a data security incident to the Montana Attorney General's office on December 11, 2025, affecting personal and financial information. The breach, initially identified on August 25, 2025, led to the exposure of data such as Full Name, Social Security Number, and Direct Deposit Account Details. Individuals who received a breach notification from Sapp Bros. should assess the potential impact and consider their next steps.
Docket sheet
- Company
- Sapp Bros., Inc.
- Venue
- Montana Attorney General
- Filed
- December 11, 2025
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredAugust 25, 2025
Date of the incident as stated in the filing.
- 2
Reported to the Montana Attorney GeneralDecember 11, 2025
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Social Security Number
- Date of Birth
- Wage and Compensation Information
- Tax Return Information
- Direct Deposit Account Details
- Mailing Address
- Email Address
Clerk's notes
Sapp Bros., Inc., a company operating a network of travel centers and petroleum distribution facilities, reported a data breach to the Montana Attorney General on December 11, 2025. The incident, which is currently under monitoring, was first identified on August 25, 2025. While the precise details of how the breach occurred remain under evaluation, such incidents often involve unauthorized access to internal systems.
According to the report, the compromised information includes sensitive personal and financial data. The exposed categories are Full Name, Social Security Number, Date of Birth, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, Mailing Address, and Email Address. This type of exposure can lead to various risks, including potential identity theft and financial fraud.
Sapp Bros. maintains a vast repository of sensitive data due to its expansive operations, encompassing human resources records, payroll, and tax information for its large workforce. The occurrence of a data breach suggests that security protocols designed to protect this confidential information may have been insufficient at the time of the incident.
If you received an official data breach notification letter from Sapp Bros., Inc., it serves as an acknowledgment that your private information was compromised. It is advisable to carefully review this notice, monitor your financial accounts and credit reports for any suspicious activity, and consider placing a fraud alert on your credit.
Companies like Sapp Bros. have a legal duty to protect the personal information they collect. When security failures lead to a data breach, affected individuals may have legal standing to seek accountability. Engaging with a legal review can help you understand your rights and options without any upfront cost.
For those who received a notification letter from Sapp Bros., Inc., learning more about the potential impact and available legal avenues is a concrete next step. This can help determine if your specific situation warrants further action and how to protect yourself moving forward.
If a notification letter about this breach reached you, see every Montana data breach on file or browse all cases.
Other Montana docket entries
- MemberSource Credit UnionMontana AGMay 5, 2026Monitoring
- MemberSource Credit UnionMontana AGMay 5, 2026Investigation Open
- MemberSource Credit UnionMT AGMay 5, 2026Investigation Open
- GrayRobinson P.A.Montana AGApril 24, 2026Investigation Open
- GrayRobinson P.A.Montana AGApril 24, 2026Monitoring
- GrayRobinson P.A.MT AGApril 24, 2026Investigation Open
- First Advantage CorporationMontana AGApril 21, 2026Monitoring
- First Advantage CorporationMT AGApril 21, 2026Investigation Open
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.