Corpay

Disclosed Sep 21, 202628,473 affectedConfirmed

What is known

People affected	28,473 (as reported by the organization)
Disclosed	Sep 21, 2026
Discovered	Nov 21, 2025
Happened	Nov 17, 2025
Attack	Not stated
Data exposed	NamesGovernment IDs
Sector	Other · US
Status	Confirmed

Sources

Official noticeago.vermont.gov

Vermont Attorney General breach report: Corpay

Official noticeoag.my.site.com

Texas Attorney General data security breach report BR-0005360: Corpay

Official noticein.gov

Indiana Attorney General 2026 data breach report: Corpay

Notices filed

Residents of VTSep 21

Vermont AG3 people

Residents of INSep 21

Indiana AG573 people

Residents of TXSep 25

Texas AG3,225 people

History of this record

source2026-10-02

empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-October-Year-to-Date-Report-2026.pdfby dailySource

records_basis2026-09-27

empty to organizationby dailySource

records2026-09-27

empty to 28473by dailySource

discovered2026-09-27

empty to 2025-11-21by dailySource

occurred2026-09-27

empty to 2025-11-17by dailySource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.

Everything about Corpay