SAPP BROS., INC.

Sapp Bros Inc experienced a cybersecurity incident on August 25, 2025, where an attacker accessed network information. The breach involved PII, including names and demographic data. Sapp Bros engaged forensic and data experts, disabled affected accounts, reset passwords, revoked admin privileges, and enhanced MFA. Affected individuals were notified on March 2, 2026, and offered IDX identity theft protection services.

Sapp Bros., Inc. notified Montana residents of a cybersecurity incident discovered on August 25, 2025, where an attacker accessed network information containing PII. The company engaged forensic experts, secured accounts, and offered IDX identity protection services to affected individuals. Notices were sent on December 10, 2025.

Sapp Bros., Inc. notified the Iowa AG of a cybersecurity incident on August 25, 2025, involving PII of approximately 16,292 individuals (including 1,741 Iowa residents). Accessed data included names, demographics, SSNs, and driver's license numbers. Sapp Bros engaged forensic experts, secured the network, disabled accounts, reset passwords, and enhanced MFA. Notification letters were mailed on December 10, 2025, offering 12 months of credit monitoring.

Sapp Bros Inc experienced a cybersecurity incident on August 25, 2025, where an attacker accessed network information containing PII. The company hired a cyber expert and data expert to investigate and review the scope. Affected data includes names and demographic information. Sapp Bros disabled accounts, reset passwords, revoked admin privileges, installed threat detection, and enhanced MFA. They are offering IDX identity theft protection services to affected individuals.

Sapp Bros Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-08-25 and was reported on 2025-12-10. 8 Indiana residents were affected. 16,292 individuals affected in total.

SAPP BROS., INC. filed a data-breach notice with the Illinois Attorney General in December 2025 (case 25-12-648). The register records the breach as discovered on November 10, 2025. Personal information types reported: drivers license, passport number, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Sapp Bros is an American company with a network of service centers and travel centers across the midwest. Founded in 1971, the company started as a single service station. Now, it operates 17 full-service travel centers that feature amenities like restaurants, merchandise, fuel products, and truck service centers. They also offer petroleum and propane services.