Payroll and HR
Updated . Data gathered daily from official public sources.
As of Oct 26, 2026, Vendor History found breach notices or SEC cyber filings for 5 of the 11 vendors it tracks in this category: ADP (2), Heartland Payroll Solutions (1), Paychex (1), Paycor (1) and Paylocity (1), dated Jun 5, 2013 to May 9, 2024. Finding nothing in these sources does not mean nothing happened.
| Vendor | State breach notices | SEC cyber filings | Exploited flaws | Latest notice or filing |
|---|---|---|---|---|
| ADP | 2 | 0 | 0 | Jun 8, 2015 |
| Gusto | 0 | 0 | 0 | None found |
| Heartland Payroll Solutions | 1 | 0 | 0 | May 28, 2015 |
| Insperity | 0 | 0 | 0 | None found |
| Justworks | 0 | 0 | 0 | None found |
| Paychex | 1 | 0 | 0 | May 9, 2024 |
| Paycom | 0 | 0 | 0 | None found |
| Paycor | 1 | 0 | 0 | Mar 26, 2018 |
| Paylocity | 1 | 0 | 0 | Nov 27, 2018 |
| Rippling | 0 | 0 | 0 | None found |
| TriNet | 0 | 0 | 0 | None found |
Don't see a vendor your business uses? Email its name to support@vendorhistory.com and we'll look at adding it.
Breach notices and SEC filings in this category
-
Paychex, Inc. filed a data breach notice with the California Attorney General. Breach date(s) listed: 03/22/2024.
Source: California Attorney General
-
Paylocity Corporation filed a data breach notice with the California Attorney General. Breach date(s) listed: 11/01/2018.
Source: California Attorney General
-
Paycor, Inc. filed a data breach notice with the California Attorney General. Breach date(s) listed: 02/16/2018.
Source: California Attorney General
-
ADP, LLC filed a data breach notice with the California Attorney General. Breach date(s) listed: 04/07/2015, 05/18/2015.
Source: California Attorney General
-
Heartland Payroll Solutions, Inc. filed a data breach notice with the California Attorney General. Breach date(s) listed: 02/22/2015.
Source: California Attorney General
-
ADP filed a data breach notice with the California Attorney General.
Source: California Attorney General
We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works