What Heartland actually is
Heartland is a merchant acquirer and point-of-sale vendor selling card acceptance, terminals and business software to small and mid-sized US businesses. It is not an independent company. Global Payments Inc. (NYSE: GPN) acquired Heartland Payment Systems in 2016 in a deal widely reported at around US$4.3 billion, and has owned it outright ever since.
The distinction matters more in 2026 than it did in 2017, because the brand is on its way out. Global Payments announced in May 2025 that it was moving "from a family of brands to a unified global identity," and its brand page now says plainly that Heartland is now Global Payments. Meanwhile heartland.us still operates, still takes leads, and describes the brand as transitioning. Both things are true at once — exactly the ambiguity a buyer should resolve before signing.
Heartland was founded in 1997 by Robert O. Carr in Princeton, New Jersey, and built an unusually distinct identity for an acquirer: its "Merchant Bill of Rights" campaign attacked the industry's habit of burying costs, and it pushed interchange-plus pricing when tiered pricing was the default. That reputation still does commercial work for the brand — but it is history, not a description of the current offer.
How the Heartland relationship works
Heartland is a direct acquirer, not a reseller — the single most useful structural fact about it, and the thing most comparison content gets wrong by lumping it in with the sales agencies that resell Global Payments processing.
With Heartland the chain is short:
- The merchant relationship is contracted directly with Heartland as a Global Payments brand — no independent sales organization in between.
- Underwriting is done by Global Payments, against its risk appetite rather than an intermediary's.
- Sponsorship runs through Global Payments' network registrations and sponsor bank relationships; Heartland holds none of its own.
- Settlement is funded by Global Payments, with an accelerated instant-deposit option sold on top of the standard timetable.
- Risk sits with Global Payments: if a cardholder disputes a charge and the merchant cannot cover it, the acquirer eats the loss — which is why acquirers underwrite, hold reserves and terminate accounts.
The practical consequence is that decisions about your account are made inside one organization: fewer parties, fewer handoffs, one contract. It also means the risk department that can freeze your funds works for the same company as the representative who sold you the terminal — and that representative has no authority over it. One product claim deserves a caveat: instant deposit accelerates when Heartland pays the merchant, but it is not participation in real-time rails such as RTP or FedNow.
How Heartland prices
Heartland publishes no rate card. Its site offers a choice between flat-rate and interchange-plus pricing and routes every enquiry to a contact form, so nothing about the actual cost of an account is available before a sales conversation.
Offering interchange-plus at all puts Heartland ahead of acquirers that quote only tiered pricing, where transactions are sorted into "qualified" and "non-qualified" buckets by rules the merchant never sees. Two caveats apply. Being offered a choice is not the same as being given the better half of it — a merchant who does not ask is often quoted whichever model suits the seller. And Heartland's own footnote states that not all merchants or transactions will qualify for flat-rate pricing and that additional fees may apply, which is a formal way of saying the headline number is not the whole cost.
Contract length, auto-renewal, early-termination terms, PCI non-compliance charges and reserve rights are not published and were not verified. That absence is the finding: in an industry where multi-year terms with liquidated-damages exit clauses remain common, unpublished terms should be read line by line, not assumed to be fine. Note the irony — Heartland built its brand on the argument that merchants deserve to see what they pay.
Where Heartland is genuinely strong
Card-present acquiring and point of sale as one purchase. Heartland sells its own restaurant and retail POS systems, mobile POS and countertop terminals alongside the processing that runs on them. For a business that wants hardware, software and a merchant account from one vendor with one support number, that bundle is real and it is the centre of the product line rather than an add-on. Merchants who want to keep their POS and shop processing separately are a poorer match.
K-12 school nutrition. This is Heartland's most defensible specialism and the hardest for a general acquirer to copy. School food service is its own problem: meal-account funding by parents, free and reduced-price eligibility handling, cafeteria line throughput, district-level reporting. Heartland has purpose-built product here. That is not something you can say about most acquirers listing "education" among a dozen verticals.
Vertical product rather than vertical marketing. Beyond schools, Heartland built distinct offerings for restaurants and retail instead of selling one terminal to everyone — the difference between a vertical strategy and a vertical brochure. Its E3 end-to-end encryption programme, built in response to the 2008 breach, belongs in the same category, though encryption of card data in transit is now table stakes rather than a differentiator.
Where Heartland falls short
Some gaps do not matter: a US small-business acquirer not offering payment orchestration is no criticism, since orchestration is a tool for enterprises routing across several acquirers and Heartland is the acquirer. The gaps that do matter for its target merchants:
- No published pricing. A buyer who wants a number before a sales call cannot get one. For businesses that shop on price, that is disqualifying by itself.
- High-risk merchants are not served. Heartland does not market to high-risk categories; its published verticals are conventional retail, restaurants, services, hospitality and education. A business in an elevated-risk category should approach specialists rather than expect an exception.
- United States only, in practice. The brand does not market cross-border acquiring or multi-currency pricing; Global Payments operates in more than 175 countries, but sells that under the parent brand.
- Developer and embedded-payments capability sits with the parent. APIs exist for Heartland-integrated products, but the developer platform and payment-facilitator programmes are marketed by Global Payments, so software companies looking to embed payments should go to the parent directly.
- No cryptocurrency or stablecoin acceptance, and no published documentation of agentic or AI-initiated payments despite AI-assisted business tools appearing in the marketing.
The biggest shortfall is not a capability gap at all: the payroll bundle is gone. Acrisure completed its acquisition of Global Payments' payroll business — the former Heartland Payroll Solutions — on 1 October 2025, in a deal reported at US$1.1 billion. Merchants who chose Heartland to get payments and payroll from one vendor now have two vendors, two contracts and two support paths.
Ownership, the 2008 breach and the litigation record
On 20 January 2009 Heartland disclosed that its processing environment had been intruded upon during 2008, exposing card data in transit. Contemporary reporting put the exposure at around 100 million cards and more than 650 financial institutions; later litigation filings referred to roughly 130 million, and no authoritative final figure was ever published. It was described at the time as the largest criminal breach of card data on record. Albert Gonzalez, who led the hacking ring, was sentenced to 20 years in prison in 2010; two Russian nationals were sentenced over the same intrusions in 2018.
By May 2010 Heartland had accrued about US$139.4 million in breach-related expenses, including a settlement providing Visa issuers up to about US$60 million and an American Express settlement of around US$3.5 million; it recovered roughly US$30 million from insurers. Consumer claims were consolidated as multidistrict litigation in the Southern District of Texas and settled, with a fund reported in the low millions and identity-theft reimbursement capped at US$10,000 per claim — uptake was very low relative to the class size. A separate 2015 incident was a different kind of failure: Heartland disclosed that its Santa Ana payroll office had been burgled and computers holding customer data, reported to include Social Security numbers and bank account details, were stolen.
On fee practices, Global Payments Direct was a defendant alongside North American Bancard in T.S. Kao, Inc. v. North American Bancard, LLC and Global Payments Direct, Inc. (N.D. Ga. No. 1:16-cv-04219-SCJ), a merchant class action alleging overcharging through marked-up and unauthorised fees, settled in 2019 for a US$15 million fund covering a class period from 31 August 2009 to 31 March 2019. Not a Heartland case — but a case about the fee practices of the corporate group a Heartland merchant now contracts with.
The corporate ground is still moving. On 12 January 2026 Global Payments completed its acquisition of Worldpay and divested Issuer Solutions to FIS, and it is reorganising into Enterprise, SMB, and Integrated & Platforms channels. A merchant comparing a Heartland quote against a Worldpay quote in 2026 is comparing two channels of the same parent.
How to evaluate Heartland before signing
Because no commercial terms are published, evaluation is entirely a matter of what you extract in writing beforehand. Ask for:
- The pricing model named explicitly in the agreement. Ask for interchange-plus with the markup stated as a separate line. If quoted flat-rate, ask which transactions will not qualify — the site's own footnote concedes some will not.
- A complete fee schedule. Monthly minimums, statement fees, PCI compliance and non-compliance charges, batch and gateway fees, chargeback fees, terminal or software subscriptions, annual charges.
- Contract length, auto-renewal and exit cost. Whether the term auto-renews, what notice cancels it, and whether early termination is a flat fee or liquidated damages calculated on projected remaining revenue — very different exposures.
- Hardware ownership. Whether terminals are bought, financed or leased, and what happens if you leave — equipment leases are frequently separate, non-cancellable agreements with a different counterparty.
- Which entity is on the contract, and what happens to your agreement, pricing and support when the Heartland brand is retired.
- Reserve and funding-hold rights. What triggers a reserve, how much can be withheld, and for how long.
Then weigh the timing. Heartland is a competent, long-established US acquirer with real vertical product and a direct relationship rather than a resold one. It is also a brand its owner has publicly said is becoming something else, inside a parent that has just completed a major acquisition, a major divestiture and a channel reorganisation. Neither fact cancels the other — but a merchant buying the Heartland name should be clear that the name is the part going away.
Capability assessment
Every company profiled on this site is assessed against the same eighteen dimensions, so the profiles can be read against one another. Each rating carries one sentence of evidence. There is no score out of ten, because a score is not defensible and a sentence is.
Core strength means a primary, differentiating capability. Supported means genuinely offered and documented, but not a differentiator. Limited means partial, geographically restricted, gated behind an enterprise tier, or delivered through a third party. Not offered means what it says. Unclear means the company markets the capability but does not document it well enough to judge — which is itself a finding.
Who Heartland suits
- US restaurants and retailers that want point-of-sale hardware, software and card processing from a single vendor with a named local sales representative rather than a self-serve signup.
- K-12 school districts needing school-nutrition point-of-sale, meal-account funding and payment collection, which is a genuine Heartland specialism rather than a generic vertical claim.
- Small and mid-sized merchants that want the option of interchange-plus rather than only flat-rate pricing, and are willing to negotiate to get it.
Who Heartland is a poor fit for
- Merchants who chose Heartland for the brand: Global Payments states on its own site that 'Heartland is now Global Payments', and heartland.us describes the brand as transitioning to Global Payments, so a merchant signing today is buying into a brand that is being retired.
- Merchants who bought Heartland for the payroll-plus-payments bundle: Global Payments sold the payroll business to Acrisure in a deal that closed on 1 October 2025, so payroll and payments are no longer the same vendor.
- Merchants who need a rate before they talk to a salesperson: Heartland publishes no rate card, routes pricing enquiries to a contact form, and its own site footnote states that not all merchants or transactions will qualify for flat-rate pricing and that additional fees may apply.
- Merchants selling outside the United States or in multiple currencies, because the Heartland brand is US-focused and does not market cross-border acquiring.
- Merchants who want vendor stability during a period of upheaval: Global Payments completed its acquisition of Worldpay and the divestiture of its Issuer Solutions business on 12 January 2026, and is reorganising into Enterprise, SMB, and Integrated & Platforms channels while consolidating its brands.
- Merchants with elevated data-security sensitivity may want to weigh Heartland's record: the 2008 intrusion was the largest card-data breach publicly known at the time, and a separate 2015 burglary of Heartland's Santa Ana payroll office exposed customer data on stolen computers.
Competitors and alternatives
| Company | Why a business would choose it instead |
|---|---|
| Toast | A restaurant merchant would switch to get a restaurant-native POS and payments platform built by a single vendor rather than a general acquirer's restaurant module. |
| Square (Block) | A small merchant would switch for published flat-rate pricing, self-serve onboarding and no sales conversation. |
| Clover (Fiserv) | A merchant would switch for a comparable bundled POS-plus-processing offer with a larger third-party app ecosystem. |
| Shift4 | A hospitality or restaurant merchant would switch for an integrated gateway-plus-acquiring stack with deep hotel and stadium vertical presence. |
| Worldpay | Now also owned by Global Payments, so a merchant comparing the two is choosing between two channels of the same parent — worth knowing before treating them as independent quotes. |
Heartland — frequently asked questions
Is Heartland still in business?
Yes, but the brand is being retired. Global Payments acquired Heartland Payment Systems in 2016 and, as of July 2026, states on its own brand page that "Heartland is now Global Payments," while heartland.us describes the brand as transitioning. Existing accounts, merchant portals and support lines continue to operate — the business was not shut down, the brand is being consolidated following Global Payments' May 2025 announcement that it would move from a family of brands to a single unified identity.
Who owns Heartland Payment Systems?
Global Payments Inc. (NYSE: GPN) has owned Heartland since April 2016, in a transaction widely reported at around US$4.3 billion. Global Payments itself completed the acquisition of Worldpay and divested its Issuer Solutions business to FIS on 12 January 2026, leaving a merchant-focused company serving over 6 million merchant locations across more than 175 countries.
What happened in the Heartland data breach?
Heartland disclosed on 20 January 2009 that its processing systems had been intruded upon during 2008, exposing card magnetic-stripe data while it was in transit. Reported exposure ranged from around 100 million to about 130 million cards across more than 650 financial institutions, making it the largest known criminal breach of card data at the time. Albert Gonzalez, who led the hacking ring, was sentenced to 20 years in prison in 2010; Heartland accrued about US$139.4 million in breach-related expenses by May 2010 and built its E3 end-to-end encryption product in response.
Does Heartland still offer payroll?
No. Acrisure completed its acquisition of Global Payments' payroll business — the former Heartland Payroll Solutions — on 1 October 2025, in a deal reported at US$1.1 billion. Businesses that originally chose Heartland for a combined payments-and-payroll bundle now deal with two separate companies under two separate agreements.
Does Heartland publish its pricing?
No. Heartland's website offers a choice between flat-rate and interchange-plus pricing but publishes no rate card or fee schedule, routing all pricing enquiries to a contact form. The site's own footnote states that not all merchants or transactions will qualify for flat-rate pricing and that additional fees may apply. Contract length, auto-renewal and early-termination terms are also not published, so all commercial terms have to be obtained and negotiated in writing before signature.
Is Heartland a direct processor or an ISO?
Heartland is a direct acquirer, not an independent sales organization reselling somebody else's processing. As a Global Payments brand, it contracts with the merchant directly, and Global Payments performs the underwriting, holds the card network registrations and sponsor bank relationships, settles funds, and carries the risk if a merchant cannot cover a disputed charge. That means account decisions — including risk holds — are made inside one organization rather than escalated between a sales company and a processor.
Does Heartland work with high-risk businesses?
No. Heartland does not market to high-risk merchant categories, and its published verticals are conventional ones: restaurants, retail, professional and home services, hospitality, K-12 school nutrition, and non-profit and municipal organizations. A business in a category that acquirers typically classify as elevated risk should approach specialist high-risk providers rather than expect an exception here.
Sources
This profile was built from the following primary and secondary sources. Where sources disagreed, the disagreement is stated in the text rather than resolved silently.
- https://en.wikipedia.org/wiki/Heartland_Payment_Systems
- https://www.heartland.us
- https://www.heartland.us/resources/merchant-bill-of-rights?archive=true
- https://www.globalpayments.com/our-company/brands/heartland-payment-systems
- https://investors.globalpayments.com/news-events/press-releases/detail/474/global-payments-introduces-new-bran
- https://investors.globalpayments.com/news-events/press-releases/detail/498/global-payments-completes-acquisiti
- https://investors.globalpayments.com/financial-information/all-sec-filings/content/0001123360-16-000080/ex991p
- https://www.acrisure.com/news/acrisure-completes-acquisition-of-heartland-payroll-solutions
- https://www.justice.gov/archives/opa/pr/leader-hacking-ring-sentenced-massive-identity-thefts-payment-processo
- https://investor.visa.com/news/news-details/2010/Heartland-Payment-Systems-Agrees-on-Settlement-to-Provide-Vis
- https://www.computerworld.com/article/1588294/heartland-breach-expenses-pegged-at-140m-so-far.html
- https://bergermontague.com/cases/heartland-payment-systems-inc-data-security-breach-litigation/
- https://www.businesswire.com/news/home/20150601006701/en/Heartland-Responds-Burglary-Payroll-Office-Santa-Ana
- https://angeion-public.s3.amazonaws.com/www.NABSettlement.com/docs/Notice.pdf
- Current employee count for the Heartland brand — no separate figure is published now that Heartland reports within Global Payments. The ~3,700 figure is from 2014, pre-acquisition.
- Exact number of cards exposed in the 2008 breach — contemporary reporting said around 100 million, litigation filings referred to about 130 million, and no authoritative final figure was published.
- The consumer class settlement amount in MDL 09-md-2046 is reported inconsistently across sources (figures of roughly US$1.9 million to US$4 million appear); the exact final approved fund was not confirmed.
- Whether the reported MasterCard breach settlement (widely cited at up to about US$41.4 million) reached the issuer-acceptance threshold required to take effect was not confirmed.
- Current merchant agreement terms — contract length, auto-renewal, early-termination fee, PCI non-compliance fees and reserve rights are not published on heartland.us and were not obtained.
- The precise timetable for retiring the Heartland brand entirely, and what happens to existing Heartland merchant agreements on migration to the Global Payments brand.
- Heartland's current sponsor bank arrangement under Global Payments.