Bread Financial Payments, Inc.

An unauthorized third party gained access to customer accounts for individuals who had not yet set up online profiles. Using stolen credentials from an unknown source, the actor accessed these accounts and redeemed credit card reward points for cash. The compromised information included credit card numbers, the last four digits of Social Security numbers, and zip codes.