The Washington State Office of the Attorney General reported a data breach involving Divvy Up, Inc. on May 3, 2021. The breach occurred between December 1, 2020, and March 8, 2021, affecting 1,137 Washington residents. The compromised information included names and payment card details due to a malware cyberattack.

On July 30, 2021, the California Office of the Attorney General reported a data breach involving Divvy Up, Inc. The breach was discovered on June 18, 2021, after malware compromised the company's website, affecting payment transactions made between May 10, 2020, and June 18, 2021. Specific numbers of affected individuals are unknown, but the breach involved names, addresses, and payment card information.