PayActiv, a provider of digital wallet payment apps, experienced a cybersecurity breach in October 2025 where an unauthorized individual accessed sensitive customer data. The incident exposed personally identifiable information (PII) of over 100,000 individuals, including names and Social Security numbers. The breach prompted legal action, with Lynch Carpenter, LLP investigating potential claims for compensation on behalf of affected customers. The compromised data poses significant risks, such as identity theft and financial fraud, given the sensitivity of the exposed records. PayActiv has not publicly disclosed the root cause or specific attack vector, but the scale and nature of the breach suggest a targeted intrusion aimed at harvesting high-value personal data. The incident underscores vulnerabilities in digital payment platforms and the broader implications for consumer trust in fintech security practices.

Payactiv, a provider of Earned Wage Access (EWA) and financial wellness services, suffered a data breach after detecting suspicious network activity. An investigation confirmed that a cybercriminal accessed and viewed sensitive personal information stored in its systems. The breach, discovered and reviewed by September 12, 2025, exposed critical data of several thousand users, including names, contact details, dates of birth, Social Security numbers, health/medical information, and financial account numbers. The compromised data poses significant risks of identity theft and fraud for affected individuals. Payactiv reported the incident to the Vermont Attorney General’s office on October 1, 2025, and began notifying impacted users via mail. In response, the company secured its systems, involved law enforcement, and offered free credit monitoring and identity theft protection services through Epiq Privacy Solutions. Users were advised to monitor financial accounts, watch for phishing attempts, and consider fraud alerts or credit freezes.

Payactiv, Inc., a financial platform enabling employees to access earned wages before payday, experienced a data breach discovered on August 19, 2025. An unauthorized third party accessed its systems between April 3 and August 20, 2025, potentially compromising sensitive personal data, including names and Social Security numbers. The breach prompted an investigation and a class-action lawsuit led by Edelson Lechtzin LLP, alleging negligence in safeguarding customer information. Affected individuals were advised to monitor credit reports and account statements for signs of identity theft or fraud. The incident highlights risks associated with financial data exposure, particularly in platforms handling payroll-related information.