Complete Payroll Solutions completepayrollsolutions.com

Complete Payroll Solutions data breach: what happened and what to do

Complete Payroll Solutions found suspicious activity in its systems around March 10, 2024. The company says names, Social Security numbers and driver's license numbers may have been involved. Notices went out in 2025, and a $2.6 million class action settlement followed.

View all 13,177 breaches
Breach date
21 Feb 2024
Made public
25 Apr 2025
Data exposed
Names, Social security numbers, Driver's licenses
Last updated

Reviewed by Anthon Wansland

Head of Product & Co-Founder

Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.

What happened

Complete Payroll Solutions (CPS) processes payroll for other businesses, so the people affected were mostly employees of its customers rather than CPS customers themselves. The company's notice says it identified suspicious activity in its systems on or around March 10, 2024, and that an unknown person accessed or acquired information. California's breach list shows a breach date of February 21, 2024. CPS told federal law enforcement and set up a call center.

The first notices reached about 320 people. Letters to a much larger group followed in early 2025, and the case settlement notice puts the total at about 376,943 people.

Sources checked: resources.completepayrollsolutions.com, comparitech.com, openclassactions.com

Last verified against the official page:

How we research this Report an error

What was exposed

The company says the information potentially involved includes names, Social Security numbers and driver's license numbers. Payroll records are a rich target: with a name and Social Security number, a criminal can try to open credit or file a false tax return, and a driver's license number helps them pass identity checks.

Response and settlement

CPS offered identity monitoring through Kroll for a limited time. A $2.6 million class action settlement was filed in federal court in Massachusetts (Dunn v. Complete Payroll Solutions, LLC). The company denies wrongdoing. The claim deadline in the notice was June 18, 2026, so the claims window has passed.

What to do if you were in it

  1. 1

    Freeze your credit

    Place a free credit freeze at Equifax, Experian and TransUnion, as the FTC advises when a Social Security number may be exposed. Then check your reports at annualcreditreport.com for accounts you don't recognize.

  2. 2

    Use the identity monitoring if your letter offered it

    The FTC recommends accepting free monitoring after a breach. It alerts you but doesn't block new accounts, so keep your freeze on.

  3. 3

    File your taxes early and check your earnings record

    If your Social Security number leaked, an early filing makes a fake return harder. Check your work history in your my Social Security account.

  4. 4

    Report misuse

    If someone uses your details, report it at IdentityTheft.gov to get a recovery plan.

  5. 5

    Check whether your email or phone is in this and other breaches

    Run a free Serus scan. It checks breach databases for your email, phone and other details and alerts you when they show up in a new leak.

Official filings

Timeline

  1. The breach happened

  2. The company made it public

  3. Reported to the California Attorney General

Frequently asked

Was I affected by the Complete Payroll Solutions breach?

If your employer used CPS for payroll, you may have been. Affected people were notified by letter, mostly in 2025. Your employer's HR team can tell you if they used CPS.

What was exposed?

Names, Social Security numbers and driver's license numbers, according to the company's notice.

Is there a settlement?

Yes. A $2.6 million class action settlement was filed in federal court in Massachusetts. The claim deadline of June 18, 2026 has passed.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Serus

Check if you're exposed in a breach with Serus

Find your leaks. Get alerted to new ones.

Run a free scan

Related guides

All guides

Related articles

All articles

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.