Evertec Reports Data Breach Affecting Financial Clients in Puerto Rico

Evertec, Inc. disclosed a cybersecurity incident on June 9, 2026, revealing potential unauthorized access to customer data that occurred on May 13, 2026. The breach, attributed to a third-party support platform, impacted financial institution clients in Puerto Rico, including transaction records, payment card numbers, and customer names. The company has initiated cyber incident response protocols, notified federal authorities, and engaged external cybersecurity experts for investigation. Affected clients are being informed, and Evertec is mailing notification letters to those impacted. The incident has not yet caused operational disruptions, but the full scope of the breach is still under investigation. Evertec is expected to incur expenses related to the incident and has cybersecurity insurance, though the extent of liabilities is undetermined.

Key Points: • Evertec reported unauthorized access to customer data affecting financial clients in Puerto Rico. • The breach involved transaction records and payment card numbers accessed through a third-party platform. • Evertec is cooperating with federal authorities and external experts to investigate the incident.