Complete Payroll Solutions data breach: what happened and what to do
Complete Payroll Solutions found suspicious activity in its systems around March 10, 2024. The company says names, Social Security numbers and driver's license numbers may have been involved. Notices went out in 2025, and a $2.6 million class action settlement followed.
View all 13,177 breaches- Breach date
- 21 Feb 2024
- Made public
- 25 Apr 2025
- Data exposed
- Names, Social security numbers, Driver's licenses
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
Complete Payroll Solutions (CPS) processes payroll for other businesses, so the people affected were mostly employees of its customers rather than CPS customers themselves. The company's notice says it identified suspicious activity in its systems on or around March 10, 2024, and that an unknown person accessed or acquired information. California's breach list shows a breach date of February 21, 2024. CPS told federal law enforcement and set up a call center.
The first notices reached about 320 people. Letters to a much larger group followed in early 2025, and the case settlement notice puts the total at about 376,943 people.
Sources checked: resources.completepayrollsolutions.com, comparitech.com, openclassactions.com
Last verified against the official page:
What was exposed
The company says the information potentially involved includes names, Social Security numbers and driver's license numbers. Payroll records are a rich target: with a name and Social Security number, a criminal can try to open credit or file a false tax return, and a driver's license number helps them pass identity checks.
Response and settlement
CPS offered identity monitoring through Kroll for a limited time. A $2.6 million class action settlement was filed in federal court in Massachusetts (Dunn v. Complete Payroll Solutions, LLC). The company denies wrongdoing. The claim deadline in the notice was June 18, 2026, so the claims window has passed.
What to do if you were in it
- 1
Freeze your credit
Place a free credit freeze at Equifax, Experian and TransUnion, as the FTC advises when a Social Security number may be exposed. Then check your reports at annualcreditreport.com for accounts you don't recognize.
- 2
Use the identity monitoring if your letter offered it
The FTC recommends accepting free monitoring after a breach. It alerts you but doesn't block new accounts, so keep your freeze on.
- 3
File your taxes early and check your earnings record
If your Social Security number leaked, an early filing makes a fake return harder. Check your work history in your my Social Security account.
- 4
Report misuse
If someone uses your details, report it at IdentityTheft.gov to get a recovery plan.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan. It checks breach databases for your email, phone and other details and alerts you when they show up in a new leak.
Official filings
- California Attorney General , filed 25 Apr 2025
Timeline
-
The breach happened
-
The company made it public
-
Reported to the California Attorney General
Frequently asked
Was I affected by the Complete Payroll Solutions breach?
If your employer used CPS for payroll, you may have been. Affected people were notified by letter, mostly in 2025. Your employer's HR team can tell you if they used CPS.
What was exposed?
Names, Social Security numbers and driver's license numbers, according to the company's notice.
Is there a settlement?
Yes. A $2.6 million class action settlement was filed in federal court in Massachusetts. The claim deadline of June 18, 2026 has passed.
Sources
- resources.completepayrollsolutions.com/hubfs/2025-announcements/cps-web-notification-event-20250310%5B87%5D.pdf
- comparitech.com/news/complete-payroll-solutions-notifies-22k-people-of-2023-data-breach-that-leaked-ssns/
- openclassactions.com/settlements/complete-payroll-solutions-data-breach-settlement.php
- oag.ca.gov/privacy/databreach/list
- consumer.ftc.gov/articles/what-know-about-credit-freezes-and-fraud-alerts
- identitytheft.gov/databreach
- ssa.gov/myaccount/
Something wrong or out of date? Tell us and we'll re-check it.