Latest / California / November 2022

Pathward N.A.

Pathward N.A. notified California AG on Nov 1, 2022 of a data breach, which occurred on Sep 4, 2022. Data exposed: Financial / bank account, Email address, Phone number, Postal address, Name.

All 2 filings by Pathward N.A., state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization
Pathward N.A.
Source
California AG · source record
Date reported
Nov 1, 2022
Date(s) of breach
Sunday, September 4, 2022
Residents affected
Not published by this source
Data exposed
Financial / bank account Email address Phone number Postal address Name
Notice letter
Sample notice (PDF)
Discovered
Sep 11, 2022, as stated in the letter
"On September 11, 2022, we discovered irregular activity in connection with www.MyPrepaidCenter.com, the website that Blackhawk operates for cardholders to activate and manage Pathward Prepaid Cards."
Days to notice
51 days from discovery (Sep 11, 2022) to the California record (Nov 1, 2022). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period
Third party
The letter attributes the incident to a vendor or service provider
First seen by BreachTally
2026-10-30 16:01 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

First seen by BreachTally at 16:01 UTC on Oct 30, 2026. New filings reach paid subscribers within 30 minutes of the agency posting, with the count, the data exposed and the letter. Start a 14-day free trial. We email you two days before the first charge and you cancel in one click.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Other filings by Pathward N.A.

OrganizationSourceStateReportedResidents affectedData exposed
Pathward, N.A. Oregon DOJ OR Nov 1, 2022 165,727 Not stated

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.