CORPAY, INC.
bd_79b84e9e2e3a93b6 · schema v1 · pii pii-v2
Full breach record for CORPAY, INC. →Corpay, Inc. disclosed that an unauthorized actor accessed the ICD Portal hosted for Swift Transportation Co., LLC between November 17 and November 21, 2025. Corpay became aware of the incident on November 21, 2025. The breach potentially exposed names, driver's license numbers, employee IDs, and OnRoad payment card details (number, expiration, security code) for Swift drivers and representatives. Corpay contained the incident, blocked access, reset PINs, replaced cards, and offered 12 months of credit monitoring. The notice was sent on September 21, 2026.
J jump to incidentP pin to compareR raw source
Incident timeline
Nov 17, 2025
Begins
Nov 21, 2025
Discovered
Sep 21, 2026
Filed
vs. sector median
+35 wks slower
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Vermont State AGbd_15fa682368cf387a2026-09-21Verified
- Indiana State AGbd_eede779676c9ba8d2026-09-21Verified
- New Hampshire State AGbd_b944460ec8f5cee62026-09-22 · +1dVerified
- Texas State AGbd_61deb96841c4e8d62026-09-25 · +4dVerified
Show 1 more filing ↓Show fewer ↑up to 20d gap
- Massachusetts State AGbd_37c9369b564eac5b2026-09-01 · +20dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Sep 1 (MA), last Sep 25 (TX) — a 24-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.