SPay Inc dba Stack Sports suffered a data breach affecting its Sports Affinity checkout platform, with notices beginning July 27, 2026. The incident potentially exposed cardholder names, payment card numbers, card expiration dates, card security codes (CVV), and checking account numbers for customers who paid by eCheck or ACH. The company finalized a review of impacted transactions on July 17, 2026, before beginning to mail notifications.
Social Security numbers were not believed to be involved, and no medical data was mentioned. The exposed data primarily consisted of financial and payment information. A notification letter regarding the incident was filed with the California Attorney General’s Office. The total number of affected individuals has not been publicly disclosed.
However, details can emerge later, and formal notification processes may be delayed as investigations continue.