Stack Sports Data Breach Exposes Payment Card and Bank Account Details
Stack Sports, a global sports technology and payments platform operated by SPay Inc., recently disclosed a data breach that compromised sensitive financial information. The incident, which occurred on May 8, 2026, went undetected until June 8, 2026, when the company identified the unauthorized access.
The breach exposed cardholder names, payment card numbers, expiration dates, CVV codes, and checking account numbers. While no Social Security or driver’s license numbers were affected, the compromised data poses significant fraud risks. Stack Sports filed breach notifications with the attorneys general of California and Nebraska and began mailing alerts to impacted individuals on July 27, 2026. The total number of affected users remains undisclosed.
In response, Stack Sports advised victims to monitor their accounts for unauthorized transactions and contact their financial institutions if suspicious activity is detected. The notification letters included guidance on ordering free credit reports, placing fraud alerts, and setting up security freezes to mitigate potential identity theft risks. The breach highlights ongoing vulnerabilities in payment processing systems and the need for heightened security measures.
Source: https://www.claimdepot.com/data-breach/stack-sports-2026
Stack Sports cybersecurity rating report: https://www.rankiteo.com/company/stacksports
"id": "STA1785256137",
"linkid": "stacksports",
"type": "Breach",
"date": "5/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Sports Technology and Payments',
'location': 'Global',
'name': 'Stack Sports (SPay Inc.)',
'type': 'Company'}],
'customer_advisories': 'Monitor accounts for unauthorized transactions, '
'contact financial institutions if suspicious activity '
'is detected, order free credit reports, place fraud '
'alerts, and set up security freezes',
'data_breach': {'personally_identifiable_information': 'Cardholder names, '
'payment card numbers, '
'expiration dates, CVV '
'codes, checking '
'account numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Payment card details, bank '
'account numbers'},
'date_detected': '2026-06-08',
'date_publicly_disclosed': '2026-07-27',
'description': 'Stack Sports, a global sports technology and payments '
'platform operated by SPay Inc., recently disclosed a data '
'breach that compromised sensitive financial information. The '
'breach exposed cardholder names, payment card numbers, '
'expiration dates, CVV codes, and checking account numbers. '
'While no Social Security or driver’s license numbers were '
'affected, the compromised data poses significant fraud risks.',
'impact': {'data_compromised': 'Cardholder names, payment card numbers, '
'expiration dates, CVV codes, and checking '
'account numbers',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'lessons_learned': 'Highlights ongoing vulnerabilities in payment processing '
'systems and the need for heightened security measures',
'recommendations': 'Monitor accounts for unauthorized transactions, contact '
'financial institutions if suspicious activity is '
'detected, order free credit reports, place fraud alerts, '
'and set up security freezes',
'references': [{'source': 'Breach notification letters'}],
'regulatory_compliance': {'regulatory_notifications': 'Filed breach '
'notifications with '
'attorneys general of '
'California and '
'Nebraska'},
'response': {'communication_strategy': 'Mailed alerts to impacted '
'individuals, filed breach '
'notifications with attorneys general '
'of California and Nebraska'},
'title': 'Stack Sports Data Breach Exposes Payment Card and Bank Account '
'Details',
'type': 'Data Breach'}