Evertec, a financial technology company, reported a data breach in June 2026. This incident was disclosed via a Form 8-K filing with the Securities and Exchange Commission (SEC) on June 9, 2026. The company became aware of potential unauthorized access to customer data occurring through a third-party support platform on May 13, 2026.
The breach may have involved data types such as transaction records, payment card numbers, customer names, contact details, and other personal information of certain Banco Popular de Puerto Rico customers. The precise number of affected individuals has not been publicly disclosed. While some reports refer broadly to other personal information, specific SEC filings confirm payment card, transaction, and customer information.
Evertec has indicated that it engaged external cybersecurity experts and notified federal law enforcement. Banco Popular de Puerto Rico, a client of Evertec, stated its own systems were not accessed and it is working with Evertec to notify affected customers. Affected individuals should monitor for official correspondence.