Stack Sports Data Security Incident Filed in Washington

SPay Inc., known widely as Stack Sports, formally reported a data security incident to the Washington Attorney General on July 27, 2026. The official filing indicates that the company experienced a compromise of its network infrastructure. The specific nature of the breach remains unspecified in the public record.

Stack Sports serves as a central technology provider for youth, amateur, and professional sports. Its platforms handle registration, payment processing, and league management for millions of athletes, parents, and sports organizations. This position means the company routinely collects and stores extensive personal information for both adults and minor children.

The official notification does not detail the specific types of personal information that may have been accessed or exfiltrated during the incident. As of the filing date, the company stated that an investigation into the security event is ongoing to ascertain the exact details and extent of the compromise.

Individuals who receive a direct notification from Stack Sports should be aware that their personal information may have been involved. While specific data types are not disclosed, any compromise of such data could lead to risks such as unauthorized account access, identity-related issues, or targeted phishing attempts.

As general protective measures, affected individuals are advised to remain vigilant. Monitor your personal accounts for any unusual activity and consider changing passwords for online services, especially those shared across multiple platforms. Enabling multi-factor authentication where available adds an extra layer of security. Be cautious of any unsolicited communications requesting personal details.