Complete Payroll Solutions (CPS), which provides payroll and HR software to other businesses, has notified individuals that an unauthorized person accessed and possibly acquired information stored on its systems. CPS says it first noticed suspicious activity around March 10, 2024, and an earlier date of February 21, 2024 is also listed among the incident dates reported. This falls under hacking or system intrusion, meaning someone outside the company gained access to internal systems rather than an employee mistake or a lost device. Once discovered, CPS reset system passwords, added additional security measures, and notified law enforcement.
Because CPS handles payroll and HR data on behalf of other companies, the people affected are not necessarily its own employees — they are current and former employees of CPS’s business clients whose information happened to be stored on the affected systems. The letter template we reviewed did not spell out the exact categories of data involved beyond confirming your name was included, which makes it hard to say with certainty exactly what else was in the affected files for any given recipient.
What information was exposed?
- Name
- Additional personal information — the specific categories were left as a placeholder in the version of the letter available to us, so we can’t confirm exactly what else was included for you
CPS is offering complimentary identity monitoring services through Kroll, including credit monitoring, fraud consultation, and identity theft restoration support. You can activate this by visiting https://enroll.krollmonitoring.com and entering the Membership Number printed on your individual letter; the letter mentions an activation deadline, but that date wasn’t filled in on the copy we reviewed, so check your own notice for the exact cutoff.
What should you do now?
- Activate the free Kroll identity monitoring using the membership number from your letter before any stated deadline.
- Because the exact data types exposed weren’t specified in the version of this letter we reviewed, treat it cautiously and consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere.
- Request your free annual credit reports at annualcreditreport.com and look for accounts or inquiries you don’t recognize.
- Consider placing a fraud alert or credit freeze with Equifax, Experian, and TransUnion — this is free and prevents new credit from being opened in your name without extra verification.
- Watch for phishing emails or calls that reference this incident, since scammers sometimes use breach news to trick people into giving up more information.
- Keep a copy of your notification letter and any correspondence in case you need to reference it later when disputing fraudulent activity.
If you have questions, Complete Payroll Solutions can be reached at (866) 651-3804, 8:00 a.m. to 5:30 p.m. Central Time, excluding major U.S. holidays.