Check City Data Breach

According to the company's notice, certain files may have been accessed or removed on or about March 21, 2025. Check City observed a network disruption resulting from unauthorized access on April 3, 2025.

The company reviewed the affected files and determined on August 11, 2025 that they may have contained personal information. An initial notice is dated September 10, 2025; California and Texas regulatory records published broader notices in March 2026.

An unauthorized party or parties accessed the Check City network and may have accessed or removed certain files. The company did not disclose the specific technical means of entry.

The Cl0p ransomware group listed Check City as a victim on its leak site. This is an attacker claim; Check City's consumer notice does not name the group or confirm that ransomware was used.

The Texas Attorney General record lists names, mailing addresses, dates of birth, Social Security numbers, driver's-license numbers, government identification such as passport or state ID numbers, and financial information such as account, credit-card, or debit-card numbers.

The affected fields may have varied by person. The list does not mean that every data type was present in every affected individual's files.

The Texas Attorney General reports 322,687 affected people nationwide, including 3,459 Texas residents. The Texas figure is part of the nationwide total and is not an additional count.

Social Security numbers, government IDs, and financial account information can support identity theft, fraudulent credit or account applications, and payment fraud. Details such as addresses and dates of birth can make messages targeting Check City customers appear more convincing.

For an unexpected message claiming to come from Check City, a bank, or a monitoring provider, visit the organization's official site or use a known phone number instead of following a supplied link. Accurate personal details do not prove the sender is legitimate.

The company said it secured its network, reported the incident to law enforcement, and began an investigation with external cybersecurity specialists. It also offered eligible people complimentary credit monitoring, fraud consultation, and identity-theft restoration services.

Notice recipients can enroll in the offered monitoring service within the period stated in their letter and regularly review credit reports, bank accounts, and card activity for unfamiliar accounts or transactions.

If an unfamiliar account or transaction appears, contact the relevant financial institution directly and consider adding a fraud alert or security freeze to the credit file. Do not share passwords, verification codes, or payment information in response to an unexpected call or message.