DisclosureLens
HackingFinancial ServicesTechnologyFinanceStolen CredentialsTargetedPIIIdentity (basic)CredentialsLowContained

Payactiv

bd_3157c62a8df34b92 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 12, 2025

Filed

Sep 30, 2025

To disclose

18 days

Affected

Not disclosed

Linked

11 filings

Confidence

68%
Full breach record for Payactiv →

Payactiv, Inc. notified Vermont consumers of a cybersecurity incident where an unauthorized actor viewed personal information, including names, addresses, and potentially credentials. The breach was identified on September 12, 2025. Payactiv engaged third-party experts, notified law enforcement, and is offering credit monitoring services.

Date basis clock✓ Clock withheld · confirmation date18 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 18 days

Sep 12, 2025

Discovered

Sep 30, 2025

Filed

vs. sector median

6 wks faster

This filing is one of 11 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filings ↓up to 99d gap

Filing propagation · 11 filings · 11 states

View merged incident ↗

Pattern: first filing Sep 25 (IN), last Jan 7 (TX) — a 104-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.