Check City Data Breach Exposes Sensitive Personal Information of Thousands
On March 25, 2026, Check City a cash loan provider operating in multiple states, including Utah and Nevada disclosed a cybersecurity incident that compromised the personal data of thousands of individuals. An unauthorized actor gained access to the company’s network, potentially acquiring sensitive personally identifiable information (PII), including:
- Full names
- Addresses
- Social Security numbers
- Driver’s license or government-issued ID numbers
- Financial account and payment card details
- Dates of birth
The breach has prompted an investigation by Lynch Carpenter, LLP, a national class action law firm, which is reviewing potential legal claims on behalf of affected individuals. The firm, with offices in Pennsylvania, California, and Illinois, specializes in data privacy litigation and has represented millions of clients in similar cases over the past decade.
No further details on the breach’s origin, scope, or remediation efforts have been released. The incident adds to a growing list of financial service providers targeted by cyber threats, underscoring the persistent risks to consumer data.
Check City cybersecurity rating report: https://www.rankiteo.com/company/check-city
"id": "CHE1774463686",
"linkid": "check-city",
"type": "Breach",
"date": "3/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Thousands',
'industry': 'Financial Services',
'location': ['Utah', 'Nevada'],
'name': 'Check City',
'type': 'Cash loan provider'}],
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Full names',
'Addresses',
'Social Security numbers',
'Driver’s license or '
'government-issued ID numbers',
'Financial account and payment '
'card details',
'Dates of birth']},
'date_publicly_disclosed': '2026-03-25',
'description': 'On March 25, 2026, Check City, a cash loan provider operating '
'in multiple states, including Utah and Nevada, disclosed a '
'cybersecurity incident that compromised the personal data of '
'thousands of individuals. An unauthorized actor gained access '
'to the company’s network, potentially acquiring sensitive '
'personally identifiable information (PII).',
'impact': {'data_compromised': 'Sensitive personally identifiable information '
'(PII)',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential legal claims under review',
'payment_information_risk': 'High'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Lynch Carpenter, LLP'}],
'regulatory_compliance': {'legal_actions': 'Potential class action lawsuit '
'under review'},
'response': {'third_party_assistance': 'Lynch Carpenter, LLP (investigation)'},
'threat_actor': 'Unauthorized actor',
'title': 'Check City Data Breach Exposes Sensitive Personal Information of '
'Thousands',
'type': 'Data Breach'}