Payactiv payactiv.com Payactiv data breach: what happened and what to do
Payactiv says an unauthorized actor viewed information in its systems between April 3 and August 20, 2025. The company learned of it on August 19, 2025. Court documents say it notified 202,192 people. Payactiv offered 12 months of free credit monitoring.
View all 13,115 breaches- Breach date
- 3 Apr 2025
- Made public
- 19 Aug 2025
- Last updated
What happened
Payactiv, a company that lets employees get paid early, sent a notice of data breach in September 2025. In the letter it filed with the California Attorney General, Payactiv says unusual activity in its network led to an investigation. On August 19, 2025, it learned that an unauthorized actor viewed information stored in its systems between April 3, 2025 and August 20, 2025. On September 12, 2025, it determined which information was involved.
Payactiv called in outside cybersecurity experts and told law enforcement. It says it has since strengthened its security measures.
How many people
The letter doesn't give a total. Court documents in the class action that followed say Payactiv sent notices to 202,192 people, according to Classaction.org. That case, Toth v. Payactiv, was reported to have a settlement that received preliminary court approval in June 2026.
What was exposed
The sample letter leaves the list of data types blank, because each person's letter names their own. Check yours. The same Classaction.org report says the files may have included names, dates of birth, financial account numbers and Social Security numbers. If your letter lists those, treat the breach as an identity theft risk, not just a phishing risk: a Social Security number and date of birth together are enough for someone to apply for credit in your name.
What Payactiv offered
Affected people get a free 12-month membership of credit monitoring and identity theft protection through Epiq's Privacy Solutions ID, with a deadline to enroll printed in the letter. Monitoring tells you about new credit activity after it happens. A credit freeze stops most of it before it starts, so do both.
What to do if you were in it
- 1
Read your notice and enroll in the free monitoring
Your letter lists the data that was yours and has an activation code and enrollment deadline for the 12 months of credit monitoring Payactiv is paying for.
- 2
Freeze your credit if your Social Security number was included
A freeze is free and you place it separately at Equifax, Experian and TransUnion. Lift it only when you apply for credit yourself.
- 3
Watch your bank accounts
If financial account numbers were involved, check statements for transfers you don't recognize and ask your bank about added fraud alerts.
- 4
Expect phishing that mentions the breach
Messages that quote Payactiv or offer help with the breach are a common follow-up. Go to the company's site yourself instead of clicking links.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which other breaches include your email or phone, and get alerts when your details show up in a new one.
Frequently asked
Was I affected by the Payactiv data breach?
If you were, Payactiv sent you a letter by mail. It lists the information involved in your case. The notice phone line is 855-291-2491.
When did the Payactiv breach happen?
Payactiv says the unauthorized access ran from April 3 to August 20, 2025, and that it learned of it on August 19, 2025.
Is there a Payactiv settlement?
Classaction.org reports a settlement in Toth v. Payactiv that received preliminary court approval on June 12, 2026, with a final approval hearing set for October 12, 2026. Check the settlement website for the current status.
Should I freeze my credit?
Yes, if your letter says your Social Security number was involved. A freeze is free and you can lift it any time.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
