Gravity Payments Data Breach Exposes Sensitive Information of Over 2,200 Individuals Gravity Payments, a Seattle-based financial services provider specializing in credit card processing and small business solutions, disclosed a data breach affecting 2,278 individuals. The incident stemmed from a vulnerability in third-party software, which an unknown actor exploited to access files stored in the company’s customer relationship management system. The breach was first detected on August 22, 2025, when a third-party service provider alerted Gravity Payments to the security flaw. An investigation, conducted with cybersecurity experts, confirmed unauthorized access to a limited set of files. A full review concluded on January 15, 2026, revealing that exposed data included names, Social Security numbers, and other personally identifiable information (PII), though specific details beyond these categories remain undisclosed. Gravity Payments reported the incident to the attorneys general offices of Maine and Vermont, with 14 affected individuals in Maine and four in New Hampshire. The company has begun notifying impacted customers and is offering free credit monitoring and identity restoration services through Experian for those who enroll within 90 days of receiving a notification. Affected individuals may also be eligible for compensation, as law firm Shamis & Gentile P.A. is investigating potential legal claims related to the breach. Gravity Payments has established a dedicated assistance line (833-931-5050) for further inquiries.