Pathward
Disclosed Oct 31, 20223 years ago793,626 affectedConfirmed
What is known
| People affected | 793,626 (as reported by the organization) |
|---|---|
| Disclosed | Oct 31, 2022 |
| Discovered | Sep 11, 2022 |
| Happened | Sep 4, 2022 |
| Attack | Hacking |
| Data exposed | Names, Credentials and tokens |
| Sector | Finance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Pathwardoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Pathwardatg.wa.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Pathwardattorneygeneral.delaware.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Pathwardjustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2023 data breach report: Pathwardin.gov · Official notice | Official notice |
| Indiana Attorney General 2022 data breach report: Pathwardin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Delaware DOJresidents of DE | Oct 31, 2022 | 543 |
| Indiana AGresidents of IN | Oct 31, 2022 | 2,913 |
| California AGresidents of CA | Nov 1, 2022 | |
| Washington AGresidents of WA | Nov 1, 2022 | 2,639 |
| Oregon DOJresidents of OR | Nov 1, 2022 | 165,727 |
| Indiana AGresidents of IN | May 27, 2023 | 25,948 |
History of this record
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/2022-DB-Year-to-Date-Report-for-Website.pdf · backfill source
- 2026-09-25 · records: 165727 to 793626 · backfill source
- 2026-09-25 · data_types: [] to ["names","credentials"] · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 165727 · backfill source
- 2026-09-25 · disclosed: 2022-11-01 to 2022-10-31 · backfill source
- 2026-09-25 · sector: other to finance · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2022-09-11 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.