Stack Sports Data Breach Exposes Payment Card and Bank Account Details Stack Sports, a global sports technology and payments platform operated by SPay Inc., recently disclosed a data breach that compromised sensitive financial information. The incident, which occurred on May 8, 2026, went undetected until June 8, 2026, when the company identified the unauthorized access. The breach exposed cardholder names, payment card numbers, expiration dates, CVV codes, and checking account numbers. While no Social Security or driver’s license numbers were affected, the compromised data poses significant fraud risks. Stack Sports filed breach notifications with the attorneys general of California and Nebraska and began mailing alerts to impacted individuals on July 27, 2026. The total number of affected users remains undisclosed. In response, Stack Sports advised victims to monitor their accounts for unauthorized transactions and contact their financial institutions if suspicious activity is detected. The notification letters included guidance on ordering free credit reports, placing fraud alerts, and setting up security freezes to mitigate potential identity theft risks. The breach highlights ongoing vulnerabilities in payment processing systems and the need for heightened security measures.