CORPAY, INC.
bd_eede779676c9ba8d · schema v1 · pii pii-v2
Full breach record for CORPAY, INC. →Corpay, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-11-17 and was reported on 2026-09-21. 573 Indiana residents were affected. 28,473 individuals affected in total.
J jump to incidentP pin to compareR raw source
Incident timeline
Nov 17, 2025
Begins
Sep 21, 2026
Filed
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Vermont State AGbd_15fa682368cf387a2026-09-21Verified
- South Carolina State AGbd_79b84e9e2e3a93b62026-09-21Candidate
- New Hampshire State AGbd_b944460ec8f5cee62026-09-22 · +1dVerified
- Texas State AGbd_61deb96841c4e8d62026-09-25 · +4dVerified
Show 1 more filing ↓Show fewer ↑up to 20d gap
- Massachusetts State AGbd_37c9369b564eac5b2026-09-01 · +20dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Sep 1 (MA), last Sep 25 (TX) — a 24-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.