Complete Payroll Solutions (CPS), a company that provides payroll and HR software to other businesses, has told a group of employees that their personal information may have been accessed during a security incident. CPS says it first spotted suspicious activity in its systems around March 10, 2024, and an investigation determined that an unauthorized individual had accessed and possibly acquired data stored on CPS servers. Because CPS works behind the scenes for its business clients, many people receiving this letter may not immediately recognize the company name — even though their payroll or HR records passed through CPS’s systems at some point.
This notice went out to current and former employees of CPS’s client companies, meaning the affected group spans multiple employers rather than a single workforce. The letter we reviewed uses a placeholder for the exact data fields involved, so it does not spell out line-by-line what was taken for every recipient — but the fact that CPS is offering Kroll identity monitoring is a strong signal that sensitive personal identifiers, not just names or emails, were part of what was stored on the compromised systems.
What data might be at risk if you got this letter from a payroll processor?
- Personal information tied to your employment record (the specific categories were not spelled out in the copy of this letter reviewed)
- Because CPS handles payroll and HR functions, the type of data it stores commonly includes Social Security numbers, bank account details for direct deposit, and other identifiers — though this letter did not confirm which of those applied to you specifically
- Your individual letter should list the exact data types affecting you; if that section is unclear, calling CPS directly is the fastest way to get a straight answer
As a precaution, CPS is providing free identity monitoring through Kroll. You can activate this service at https://enroll.krollmonitoring.com using the membership number printed on your letter; the version of the notice we reviewed did not include a specific expiration date or the exact number of months covered, so check your own copy for those details before the window closes.
Steps to take now that a payroll provider has reported a breach
- Activate the free Kroll monitoring using the membership number on your letter as soon as possible, since these offers typically expire after a set window
- Pull your credit reports from Equifax, Experian, and TransUnion at annualcreditreport.com and look for any accounts or inquiries you don’t recognize
- Consider placing a fraud alert or a full credit freeze with each of the three bureaus — a freeze is free and blocks new credit from being opened in your name without your explicit sign-off
- Watch your bank and payroll direct-deposit accounts closely for unexpected changes, since payroll system breaches sometimes lead to account-redirect scams
- For ongoing peace of mind, consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere online
- Keep a copy of this letter and any Kroll enrollment confirmation in case you need to prove you were affected later on
If you have questions about this incident, Complete Payroll Solutions can be reached at (866) 651-3804, Monday through Friday from 8:00 a.m. to 5:30 p.m. Central Time.