Updated September 17, 2026
GlobalvCard LLC, doing business as Edenred Pay, notified individuals in September 2026 that a data security incident may have affected information processed through its accounts-payable and payment services. The public sample notice identifies names, mailing addresses, and Social Security numbers, but does not disclose when the incident occurred or how many people were affected. Edenred Pay says it is not aware of malicious use caused by the incident and is offering notice recipients two years of Cyberscout credit monitoring plus fraud assistance. Law firms are gathering information from affected people, but no class action, certified class, settlement fund, or court-approved payment appears in the reviewed record.
Eligible notice recipients may activate single-bureau credit monitoring, reports and scores, plus proactive fraud assistance. The recipient-specific code and 90-day enrollment window appear in the notice. Internet access and an email account are required, and monitoring may not be available to minors.
No class has been certified and no settlement fund or guaranteed recovery exists. An attorney may evaluate individual facts, but may decline the matter or decide that no case should be filed.
No settlement payment or damages award is available. Eligible notice recipients may activate two years of single-bureau credit monitoring, credit reports and scores, and proactive fraud assistance through Cyberscout. Enrollment requires the unique code in the letter and must occur within 90 days of that letter's date.
This case is still developing and has no official claim site yet. Class Action Pulse is not a law firm — submit your details below to be notified and connected with a firm handling the case.
Check your eligibility and get help understanding your claim. It's free and takes under a minute.
The reviewed public record shows an active attorney investigation, not a verified filed class action, certified class, or settlement.
The public sample notice identifies the recipient's name, mailing address, and Social Security number. It does not establish that every Edenred Pay customer or every record held by the company was involved.
Edenred Pay's notice says the company was not aware of malicious use resulting from the incident when the notice was issued. That statement does not rule out later misuse and does not establish that misuse occurred.
The only confirmed deadline is the recipient-specific Cyberscout enrollment deadline, 90 days after the date of the person's letter. It is not a court claim deadline.
No. An intake lets a firm assess the facts. The firm may decline representation, and any future lawsuit would face defenses and court review.
