Corpay, Inc. Data Breach Notice (South Carolina Attorney General)

The filing from Corpay, Inc. means that personal information belonging to 1,041 people is now outside the company’s control. If you received a notification letter from them, your records were part of this incident.

No passwords or credentials were exposed

This is important: the notification lists only personal information. No passwords, no login details, and no financial account credentials appear in the exposed categories. That removes the immediate risk of someone using this data to log into your Corpay account or any linked services.

What the exposed personal information can enable

Name combined with other personal details can still be used for identity theft, tax fraud, or impersonation attempts. Because the record does not list Social Security numbers, driver’s licenses, or medical data, the long-term risk is lower than in many similar filings. However, the information that was exposed cannot be changed. Once it is out, it stays out.

The filing does not state when the incident occurred, only that Corpay notified South Carolina authorities on September 21, 2026. The company is required to send direct notice to affected individuals, usually by mail. If you have not received a letter, it is likely your information was not included. Anyone who has moved since the incident should contact Corpay directly to confirm their status.

The permanent nature of personal data

Unlike a credit card or password, the personal information listed in this filing cannot be reissued. That is why breach notifications of this type focus on monitoring rather than quick fixes. The absence of government identifiers such as Social Security numbers in the disclosed categories is genuinely good news and limits what thieves can do with the stolen data.

How to check whether you are affected

Watch for a letter from Corpay, Inc. sent to your last known address. Absence of that letter usually means you were not in the group of 1,041 affected customers. If you have changed addresses recently, reach out to the company to verify.

Practical steps specific to this exposure

• Place a fraud alert with the three major credit bureaus. This makes it harder for someone to open new accounts in your name using any personal details obtained in the breach.
• Review your annual credit reports for unfamiliar activity. Look for accounts or inquiries you do not recognize.
• Monitor tax filings closely in the coming year. Identity thieves sometimes use personal information to file fraudulent tax returns.
• Be wary of unsolicited calls or emails claiming to be from Corpay. Verify any request for information by contacting the company through official channels listed on their website.
• Consider identity theft protection services that include dark web monitoring. While not required, this can alert you if the exposed personal information appears for sale.