Payactiv, Inc. has notified individuals that an unauthorized actor gained access to its network and viewed information stored in its systems. The company says it first identified unusual network activity on August 19, 2025, and determined through its investigation that the unauthorized actor had access to information between April 3, 2025 and August 20, 2025. This falls into the category of a hacking or system intrusion. Payactiv activated its incident response protocols, brought in third-party cybersecurity experts, and notified law enforcement. On September 12, 2025, the investigation confirmed which specific pieces of information were involved for each affected person, though the version of the letter reviewed here used a placeholder rather than listing those data elements out.
