ConnectPay
bd_3bc995535aaa5010 · schema v1 · pii pii-v1
Full breach record for ConnectPay →ConnectPay LLC experienced an internal code error between February 2 and February 6, 2026, that incorrectly exposed 1099NEC data (including names, SSNs, and addresses) of employees to other employees of the same company. No malicious actors were involved. The issue was discovered on February 5, 2026, and access was removed on February 6. A permanent code fix was deployed on February 11, 2026. Affected Massachusetts residents are offered 18 months of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Feb 2, 2026
Begins
Feb 5, 2026
Discovered
Feb 26, 2026
Filed
vs. sector median
16 wks faster
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.