Skip to main content
Data Breach Check

Payroll & HR data breaches

7 official notices from 3 organizations in the last 12 months

Nov 1, 2025 to Oct 25, 2026 · CA list newest Oct 22 · TX Oct 23 · WA Oct 6 · HHS Oct 1

Paper-collage illustration: paper pay stub with a perforated edge and blank lines

Data listed most often

  • Social Security number4 of 4
  • Bank or card number4 of 4
  • Date of birth4 of 4
  • Name4 of 4
  • Driver's license number2 of 4
  • ID number (passport, military, state or student)2 of 4

Counted on Texas and Washington notices, the lists that itemize data.

Steps that apply most often

  1. Freeze your credit at all three bureaus4 notices
  2. Get an IRS Identity Protection PIN4 notices
  3. Call your bank or card issuer4 notices

Check a company and get its steps

By regulator

  • CA AGCalifornia Attorney General3
  • TX AGTexas Attorney General2
  • WA AGWashington Attorney General2
  • HHS OCRHHS Office for Civil Rights0

Every notice, newest first

  1. Poppins Payroll Company

    Oct 2TX AG23,796 Texans · 246,937 totalPayroll & HR

    Notice ↗
  2. Poppins Payroll Company

    Sep 29CA AGNumber not listedPayroll & HR

    Notice ↗
  3. Poppins Payroll Company

    Sep 29WA AG17,954 WashingtoniansPayroll & HR

    Notice ↗
  4. Cornerstone Staffing Solutions, Inc.

    Sep 15TX AG4,425 Texans · 366,122 totalPayroll & HR

    Notice ↗
  5. Cornerstone Staffing Solutions, Inc.

    Sep 11CA AGNumber not listedPayroll & HR

    Notice ↗
  6. Cornerstone Staffing Solutions, Inc.

    Sep 11WA AG681 WashingtoniansPayroll & HR

    Notice ↗
  7. Alcott HR

    Jun 17CA AGNumber not listedPayroll & HR

    Notice ↗

Questions

How many payroll & hr data breaches were listed in the last 12 months?

7 notices from 3 organizations, listed from Nov 1, 2025 to Oct 25, 2026 by the California, Washington and Texas attorneys general and HHS. Only breaches above each list's filing threshold appear.

What data do payroll & hr breach notices list most often?

On the Texas and Washington notices that itemize it: Social Security number, bank or card number, date of birth. California's list doesn't say what was taken; the letter does.

I got a letter from a payroll & hr. What should I do first?

Check the company above, then freeze your credit at all three bureaus; get an irs identity protection pin; call your bank or card issuer. Your letter is the proof of what was taken and lists any free monitoring offer and its deadline.

Industry comes from the regulator's category when it gives one; otherwise it is guessed from the organization's name. Sources: California, Washington and Texas attorneys general and the HHS Office for Civil Rights, as listed on Oct 25, 2026.