About Topstep LLC
Topstep LLC, a commercial entity based in Chicago, Illinois, recently experienced a significant data breach affecting 1,920 individuals, including one resident of Maine. The breach was reported by Lucas Schaetzel, the Managing Associate at Benesch Law, who serves as outside legal counsel for the company. This incident involved an external system breach through hacking, where sensitive information such as names and personal identifiers was acquired.
What Happened
On November 26, 2025, Topstep was subject to a cybersecurity attack, which resulted from cyber threat actors engaging in credential-stuffing. Credential stuffing is the automated injection of stolen username and password pairs (“credentials”) into website login forms to fraudulently gain access to user accounts in hopes that users employ the same credentials across multiple platforms. Through this attack, cyber threat actors may have accessed your account. Upon detecting the attack, Topstep acted quickly and diligently to contain and combat the attack. Specifically, Topstep conducted a thorough investigation and analysis of the attack.
The breach occurred on November 26, 2025, and was detected on December 5, 2025. It involved unauthorized access through credential-stuffing, affecting user accounts and potentially exposing sensitive information.
Next Steps
Affected users are advised to remain vigilant regarding their personal information and immediately report any unauthorized changes to Topstep. It is recommended to review credit files and consider placing a fraud alert on credit reports to protect against identity theft. Monitoring account statements for suspicious activity is also suggested. Users should follow the instructions provided by Topstep for additional steps or contact their customer support for further assistance.
Identity Theft Protection Services
Topstep is offering affected individuals complimentary access to Experian IdentityWorks for 24 months. This service includes identity restoration support, credit monitoring, and up to $1 million in identity theft insurance. Users are encouraged to activate the fraud detection tools available through the service and can contact Experian’s customer care team for assistance. Enrollment must be completed by March 31, 2026, to take advantage of these protections.