DataBreachCaseFile.com
MonitoringMontana AG filing · December 11, 2025

Sapp Bros. Reports Data Breach Affecting Personal Information

Sapp Bros., Inc. filed notice of a data breach in Montana, revealing unauthorized access to systems containing sensitive personal and financial-related information. The incident, reported in December 2025, involved the exposure of various employee data types, prompting concerns for affected individuals.

State
Montana
Breach date
August 25, 2025
Reported
December 11, 2025

What may have been exposed

  • Full Name
  • Social Security Number
  • Date of Birth
  • Wage and Compensation Information
  • Tax Return Information
  • Direct Deposit Account Details
  • Mailing Address
  • Email Address

Sapp Bros., Inc., a prominent operator of travel centers and petroleum facilities, officially reported a data security incident to the Montana Attorney General's office on December 11, 2025. This breach event, which occurred on August 25, 2025, involved unauthorized access to internal systems that contained sensitive personal data.

The information reportedly exposed in the Sapp Bros. breach includes individuals' Full Name, Social Security Number, Date of Birth, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, Mailing Address, and Email Address. These categories encompass core personal identifiers and financial data related to employment records.

The exposure of such detailed personal and financial information creates significant risks for those affected. Full Name, Social Security Number, and Date of Birth are foundational for identity theft, potentially leading to fraudulent accounts or impersonation. Furthermore, the compromise of wage, tax, and direct deposit details could be exploited for various financial frauds, including unauthorized transactions or fraudulent tax filings.

Individuals who may be impacted by this incident should remain vigilant and take proactive steps to safeguard their personal and financial security. It is highly recommended to monitor financial accounts and credit reports closely for any suspicious activity. Placing a fraud alert or security freeze on credit files can offer additional protection against unauthorized new accounts being opened in your name.

Carefully reviewing all financial statements, tax documents, and communications from Sapp Bros., Inc. is also advisable. The company has indicated that the investigation into the full scope and impact of this incident remains ongoing, with continued monitoring.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Guard against tax fraud

    File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.

  • Watch your financial accounts

    Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.

  • Secure your online accounts

    Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Montana Attorney General filing

Related data breach cases