The breach originated through a security flaw in Metabase, a software tool utilized by the Boulder-based payroll firm. Poppins Payroll identified the unauthorized access on the same day it occurred, subsequently notifying state Attorneys General in California and Vermont. While Vermont officials confirmed 333 affected residents, the total number of victims across the country remains undisclosed by the company.
Edelson Lechtzin LLP Probes Poppins Payroll Data Breach
A security vulnerability in a third-party software vendor has triggered a class action investigation into Poppins Payroll. The incident, detected on September 3, 2026, potentially exposed the Social Security numbers, financial account details, and sensitive tax information of household employers and employees who rely on the platform for payroll management.

Edelson Lechtzin LLP is now evaluating potential claims for those impacted by the leak. The firm aims to determine if legal action can secure compensation for out-of-pocket expenses, lost time, and broader privacy damages, while potentially compelling the company to overhaul its data security protocols. Affected individuals are urged to monitor their financial statements and utilize the two-year credit monitoring services offered by Poppins Payroll to mitigate the risk of identity theft.




Comments (0)
No comments yet. Be the first!