DataBreachCaseFile.com

Case file

Case File: Corpay, Inc. Data Breach

This file collects the dated facts on record for the Corpay, Inc. incident. The state report is dated September 25, 2026. The incident itself is dated November 17, 2025.

Timeline

312 days separate the incident date from the date it was reported.

  1. November 17, 2025Incident dateWhen the filing says the breach took place.
  2. September 25, 2026Report filed in TexasDate the notice was lodged with the Texas Attorney General.

Case facts

Filing state
Texas
Date reported
September 25, 2026
Incident date
November 17, 2025
Receiving office
Texas Attorney General

Data categories in the file

  • Full Name
  • Social Security Number
  • Date of Birth
  • Financial Account Number
  • Routing Number
  • Corporate Financial Records
  • Transaction History
  • Mailing Address

Case notes

Corpay, Inc., a prominent global corporate payments and business-to-business (B2B) financial technology leader, formally reported a data security incident to the Texas Attorney General on September 25, 2026. This filing, concerning an unspecified breach that occurred on November 17, 2025, notes that the company manages extensive financial transactions, payroll interfaces, corporate accounts, and commercial travel expense management, processing and storing significant amounts of personal and financial data.

The official filing indicates that the breach led to the exposure of highly sensitive personal and financial identifiers. The specific data types reported as compromised include Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Corporate Financial Records, Transaction History, and Mailing Address. The investigation status is currently reported as monitoring.

The exposure of this combination of personal and financial information creates substantial risks for affected individuals. Full Name, Social Security Number, and Date of Birth are foundational data points often used in identity theft schemes, potentially leading to the opening of fraudulent accounts or unauthorized access to existing services. The compromise of Financial Account Numbers, Routing Numbers, and Transaction History directly exposes individuals to potential unauthorized financial activities and account takeovers.

Individuals who receive notification about this Corpay incident should proactively safeguard their information. It is advisable to review bank statements and credit reports diligently for any unusual transactions or unfamiliar accounts. Consumers can also consider placing a fraud alert or security freeze on their credit files with the major credit bureaus to help prevent new credit from being opened in their name without authorization. Always exercise caution regarding unsolicited requests for personal information.

Questions about this case file

Where does the Corpay, Inc. case file come from?
Every entry is taken from the breach report Corpay, Inc. lodged with the Texas Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?
Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?
It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?
Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

More Texas case files

Texas data breaches

Filing source: Texas Attorney General