PCS Revenue Control Systems pcsrevenue.com

PCS Revenue Control Systems data breach: what happened and what to do

PCS Revenue Control Systems, a school meal software company, found unauthorized access to a server on December 19, 2019. Letters went out in March 2021. Names and student ID numbers were involved, and for some people Social Security numbers and dates of birth.

View all 13,177 breaches

Breach date: 19 Dec 2019
Made public: 17 Mar 2021
Data exposed: Names, Dates of birth, Social security numbers
Last updated: 27 Oct 2026

Reviewed by Anthon Wansland

Head of Product & Co-Founder

Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.

What happened

PCS Revenue Control Systems makes software for school lunch and meal programs. On December 19, 2019 it identified unauthorized access to a server that belonged to Advanced Business Technologies, a company PCS acquired in 2016. The server held files and records related to school meal programs.

PCS says it secured its network and brought in outside forensic experts. Notice letters went to affected people in March 2021, more than a year after the discovery, and school districts including DeKalb County in Georgia and Polk County in Florida passed the news to parents. The notices describe names and school student ID numbers, and for some people Social Security numbers and dates of birth. PCS offered one year of identity monitoring through Kroll at no cost and said it had seen no evidence of misuse.

A Social Security number and date of birth together are what criminals need to open credit in someone's name. Because many of those affected were children, misuse can go unnoticed for years until they first apply for credit. A lawsuit over the breach was later settled for $1.135 million, according to the IAPP.

Check your own letter or ask your school district whether you were included.

Sources checked: consumer.sc.gov, iapp.org, govtech.com

Last verified against the official page: 27 Oct 2026

How we research this Report an error

What to do if you were in it

1

Read your notice and take the free monitoring

If you got a letter, it explains what was exposed for you and how to enroll in the identity monitoring PCS offered. Check the enrollment deadline in the letter. The FTC recommends reading the notice carefully.
2

Freeze your credit, or your child's

A credit freeze is free and stops lenders from seeing a credit report, which blocks most new accounts. The FTC explains how to place one at Equifax, Experian and TransUnion, and how a parent can freeze a child's file.
3

Watch for tax and benefits fraud

If a Social Security number was exposed, be alert to notices from the IRS or benefits agencies that you didn't expect. Report identity theft at IdentityTheft.gov.
4

Expect phishing that mentions your school

Student names and school details can make a scam message look real. Contact the school or your district using details you already have, not a link in a message.
5

Check whether your email or phone is in this and other breaches

Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your data appears, so you know what to act on.