SPay Inc, known as Stack Sports, a major technology and payment processor for youth sports, recently disclosed a data breach. The incident, which occurred on May 8, 2026, was reported to Indiana officials on July 27, 2026, raising concerns for families, athletes, and coaches using their services.
The compromised information includes Full Name, Date of Birth, Email Address, Mailing Address, Payment Card Information, Financial Account Number, Routing Number, and Transaction and Registration History. These sensitive data types were entrusted to Stack Sports through their registration platforms, league management software, and payment gateways.
For those affected, the exposure of such detailed personal and financial data carries significant risks. This can lead to potential identity theft, unauthorized charges on payment cards, and various forms of financial fraud. Of particular concern is the exposure of data belonging to minors, whose pristine credit profiles can make them targets for long-term identity theft that often goes unnoticed for years.
Companies like Stack Sports have a legal responsibility to protect the sensitive information they collect. This includes implementing robust security measures to prevent unauthorized access. A data breach suggests that these essential safeguards may have been insufficient or improperly maintained, potentially failing to meet legal obligations designed to protect consumer data.
If you have received a data breach notification letter from Stack Sports, it serves as formal acknowledgment that your information was compromised. It is advisable to closely monitor your financial accounts and credit reports for any suspicious activity. You may also be eligible to seek compensation through legal action.