Gravity Payments Data Breach Lawsuit Investigation
Gravity Payments recently notified regulators that an unauthorized party accessed certain files containing consumer information kept in its customer-relationship management system. If you received a letter about this incident, you may be entitled to free identity-protection services and potential legal remedies.
Read the verified timeline, learn your next steps, and contact an experienced data-breach attorney to discuss your rights.
Key Facts at a Glance
Company: Gravity Payments, Inc. (Gravity Payments)
Industry: Financial Services / Payment Processing
Discovery date: August 22, 2025
Breach confirmed to regulators: February 4, 2026
Information involved: Name and another personal identifier (unspecified)
Free services offered: Credit monitoring and identity-restoration through Experian (enroll within 90 days of the letter)
What Happened?
On August 22, 2025, a third-party service provider informed Gravity Payments that a vulnerability in the provider’s software allowed an unknown actor to access files stored within Gravity’s customer-relationship management platform. Gravity immediately retained independent cybersecurity specialists to secure its environment and investigate.
The outside experts confirmed that a limited number of files were accessed. A painstaking, file-by-file review concluded on January 15, 2026 and revealed that certain personal information was present in the compromised data. Gravity says it has no evidence that the information has been misused.
What Data Was Exposed?
According to the notice filed with the Maine Attorney General, the following data elements were involved:
Name
An additional personal identifier (specific field not disclosed in the public filing)
How Gravity Payments Responded
Secured internal systems and permanently revoked the vendor’s data access
Engaged third-party cybersecurity experts
Notified federal law-enforcement authorities
Began notifying impacted individuals and offering complimentary credit-monitoring and identity-restoration services through Experian
Your Next Steps
If you received a letter, consider taking the following actions immediately:
Enroll in the free Experian credit-monitoring service within the 90-day window.
Review bank, credit-card and payment-processing statements for unfamiliar transactions.
Request free copies of your credit reports and place a fraud alert or security freeze if you notice suspicious activity.
Keep all breach-related correspondence; it may be required to show eligibility for any future settlement or lawsuit.
Company Overview
Gravity Payments is a Seattle-based payment-processing company known for offering merchant services to small and mid-sized businesses.
Website: gravitypayments.com
Headquarters: 5601 22nd Ave NW, Suite 200, Seattle, Washington, United States
Year founded: 2004
Industry: Financial Services
Employees: 240
Privacy Policy: View
Contact Page: Get Support
Sources
Impacted Entities
Frequently Asked Questions
I received a data breach letter from Gravity Payments — what should I do?
Enroll in the free Experian credit-monitoring service within 90 days, monitor your financial accounts, and keep the letter in a safe place. Consider speaking with a data-privacy attorney about potential compensation.
How do I submit a claim related to the Gravity Payments data breach?
No class action or settlement has been announced yet. Preserve all breach notices and consult consumer-protection counsel to determine if you qualify to file an individual or group claim.
Am I eligible to join a lawsuit against Gravity Payments?
Eligibility will depend on factors such as residence, the type of data exposed, and proof of resulting harm. An attorney can evaluate your specific situation.
What information did the Gravity Payments breach expose?
The company reported that names and an additional, unspecified personal identifier were contained in the compromised files.
Did Gravity Payments offer credit monitoring, and for how long?
Yes. Impacted individuals received complimentary credit-monitoring and identity-restoration services through Experian. The letter explains how to enroll and the exact term of coverage.
How many people were affected by the Gravity Payments breach?
Gravity Payments did not disclose the total number of affected individuals in its filing with the Maine Attorney General.
How can I get the official breach notice (PDF) for Gravity Payments?
You can download the publicly filed notice directly from the Maine Attorney General’s website using the button near the top of this page.
Attorney Advertising. Prior results do not guarantee a similar outcome.
