CORPAY, INC.
bd_37c9369b564eac5b · schema v1 · pii pii-v2
Full breach record for CORPAY, INC. →Corpay, Inc. disclosed that an unauthorized actor accessed the ICD Portal hosted for Swift Transportation Co., LLC between November 17 and November 21, 2025. Corpay became aware of the incident on November 21, 2025. The actor may have obtained OnRoad card information, including name, driver's license number, employee ID, card number, expiration date, and security code. Corpay contained the incident, blocked access, reset PINs, replaced cards, and reimbursed suspicious payments. Affected individuals are offered 12 months of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Nov 17, 2025
Begins
Nov 21, 2025
Discovered
Sep 1, 2026
Filed
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Vermont State AGbd_15fa682368cf387a2026-09-21 · +20dVerified
- South Carolina State AGbd_79b84e9e2e3a93b62026-09-21 · +20dCandidate
- Indiana State AGbd_eede779676c9ba8d2026-09-21 · +20dVerified
- New Hampshire State AGbd_b944460ec8f5cee62026-09-22 · +21dVerified
Show 1 more filing ↓Show fewer ↑up to 24d gap
- Texas State AGbd_61deb96841c4e8d62026-09-25 · +24dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Sep 1 (MA), last Sep 25 (TX) — a 24-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.