Skip to content

Phia Group

Disclosed Jan 30, 20267 months ago1,512,742 affectedConfirmed

Official notice

What is known

People affected1,512,742 (as reported by the organization)
DisclosedJan 30, 2026
DiscoveredJul 8, 2024
HappenedJul 8, 2024
AttackHacking
Data exposedSocial Security numbers, Health, Insurance, Payment cards, Financial, Addresses, Names, Government IDs
SectorOther · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Phia Groupoag.ca.gov · Official notice
Washington Attorney General breach notice: Phia Groupatg.wa.gov · Official notice
Oregon DOJ breach notice: Phia Groupjustice.oregon.gov · Official notice
Texas Attorney General data security breach report BR-0005059: Phia Groupoag.my.site.com · Official notice
Vermont Attorney General breach report: Phia Groupago.vermont.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CAJan 30
Washington AGresidents of WAJan 302,802
Oregon DOJresidents of ORFeb 740,366
California AGresidents of CAMay 15
Texas AGresidents of TXMay 22121,354
Vermont AGresidents of VTJul 4989
History of this record
  • 2026-09-25 · source: empty to https://ago.vermont.gov/categories/security-breach-notices · backfill source
  • 2026-09-25 · data_types: ["ssn","health","insurance","payment-card","financial","addresses","names"] to ["ssn","health","insurance","payment-card","financial","addresses","names","government-id"] · backfill source
  • 2026-09-25 · data_types: [] to ["ssn","health","insurance","payment-card","financial","addresses","names"] · backfill source
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 1512742 · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · discovered: empty to 2024-07-08 · backfill source
  • 2026-09-25 · disclosed: 2026-05-15 to 2026-01-30 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Phia Group

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.