Stack Sports Data Breach Impacts User Information in Indiana

SPay Inc, operating as Stack Sports, reported a data breach to Indiana authorities on July 27, 2026. The incident potentially exposed sensitive personal and financial details collected through its sports registration and payment platforms. Individuals should review notifications and consider monitoring their financial accounts for suspicious activity.

State: Indiana
Breach date: May 8, 2026
Reported: July 27, 2026

What may have been exposed

Full Name
Date of Birth
Email Address
Mailing Address
Payment Card Information
Financial Account Number
Routing Number
Transaction and Registration History

SPay Inc, doing business as Stack Sports, filed a data breach notification with the Indiana Attorney General's office on July 27, 2026. The breach, which occurred on May 8, 2026, involved unauthorized access to the technology and payment processing systems used for youth and amateur sports.

The specific method of unauthorized access was not detailed in the public filing. However, such incidents typically involve compromises of digital infrastructure that manage registration platforms, league management software, and payment gateways.

The reported exposed data categories include Full Name, Date of Birth, Email Address, Mailing Address, Payment Card Information, Financial Account Number, Routing Number, and Transaction and Registration History. This information is routinely collected by Stack Sports for managing sports leagues and processing payments.

The exposure of these data types can create risks for affected individuals. Compromised personal identifiers like full names and dates of birth, combined with financial details, could potentially be used for various forms of financial fraud or identity theft. The company collects data for a large user base, including minor athletes, which carries particular risks if personal information is misused.

Individuals who receive an official notification letter from Stack Sports should carefully review the document for specific details regarding their compromised information. It is advisable to remain vigilant and take proactive measures to protect personal and financial data. This includes regularly monitoring financial account statements, reviewing credit reports for unfamiliar activity, and considering placing a fraud alert or credit freeze with credit bureaus.

Further information regarding the breach, including any updates on its investigation status, would typically be provided by Stack Sports directly to affected individuals or through public filings with regulatory bodies.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Secure your online accounts
Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases

Browse all Indiana data breaches View the full case directory