SPay Inc dba Stack Sports data breach

Clerk's notes

On July 27, 2026, SPay Inc., operating under the brand Stack Sports, filed a notification with the Washington Attorney General regarding a data security incident. Stack Sports provides critical software solutions for youth, amateur, and professional sports, including registration, payment processing, and league management for millions of users nationwide.

The official report indicates a compromise of Stack Sports' network infrastructure. While the specific categories of data involved in this incident have not been detailed, Stack Sports routinely handles a wide range of personal information, including data related to minor children, as part of its administrative services for sports leagues.

For individuals whose personal information was entrusted to Stack Sports, such an exposure can lead to various risks. These may include unauthorized access to accounts, potential for unwanted communications, or other misuses of the information. Given the company's role, this incident may affect families and participants across many sports organizations.

If you received a data breach notification letter from Stack Sports, it serves as formal acknowledgement that your personal information, or that of your dependents, was involved. Review this letter carefully for any specific recommendations it provides. It is generally advisable to remain vigilant for any unusual activity related to your online accounts or personal identity.

Under Washington law, companies handling sensitive consumer data have obligations to protect that information. The occurrence of a security incident often raises questions about the adequacy of these protective measures. Individuals who received a notification letter may wish to explore their options. A free, no-obligation case review can help determine if your personal situation warrants further action.

If a notification letter about this breach reached you, see every Washington data breach on file or browse all cases.