Edenred Pay Data Breach May Expose Social Security Numbers

On September 17, 2026, a data breach affecting Edenred Pay, a corporate payments company, was disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach, which may have exposed names, mailing addresses, and Social Security numbers, has prompted a legal investigation by the national class action firm Edelson Lechtzin LLP.

Edenred Pay, headquartered in Bonita Springs, Florida, operates as a U.S. subsidiary of the Edenred Group. The company processes personal information in connection with its accounts payable and payments services. While the exact timeline of the incident is not specified, Edenred Pay has taken steps to address the breach, including revoking compromised access credentials, securing impacted systems and applications, and implementing enhanced monitoring tools to assist with detection and response.

Individuals affected by the breach are being notified by Edenred Pay. The firm is urging affected individuals to preserve their breach notification letters and enroll in complimentary Cyberscout monitoring services before the 90-day deadline stated in the letter. Additionally, Edenred Pay advises individuals to review their account statements and credit reports regularly, remain vigilant for suspicious activity, and consider placing a fraud alert or security freeze on their credit file.

Edelson Lechtzin LLP handles class and collective actions involving securities and investment fraud, federal antitrust violations, ERISA employee benefit plans, wage theft, and consumer fraud. The firm's expertise in data breach litigation is aimed at protecting the rights of individuals whose personal information has been compromised. The breach may have exposed sensitive information, including names, mailing addresses, and Social Security numbers, increasing the risk of identity theft, account fraud, and targeted phishing.

The incident was reported to the Massachusetts Office of Consumer Affairs and Business Regulation on September 15, 2026. Edenred Pay has not provided a timeline for the incident, including when the breach occurred, when it was discovered, or when the company determined that personal information had been affected. The company has taken steps to address the incident, but the full extent of the breach and the number of people affected remain undisclosed.

The firm's expertise in data breach litigation is aimed at protecting the rights of individuals whose personal information has been compromised. Individuals are encouraged to take proactive steps to protect their personal information and seek legal advice if they believe their data has been compromised.