Phia Group Data Breach Exposes Sensitive Health and Personal Information of Nearly 25,000 Texas Residents
Schubert Jonckheer & Kolbe LLP is investigating a data breach at The Phia Group, LLC, a Massachusetts-based healthcare cost containment and compliance services provider for self-insured health plans and third-party administrators. The incident, discovered on July 9, 2024, involved unauthorized access to Phia Group’s network between July 8 and July 9, 2024, temporarily disrupting operations.
Phia Group later confirmed that the breach exposed sensitive data, including names, addresses, Social Security numbers, driver’s license numbers, medical information, and health insurance details. The company reported that 24,903 Texas residents were affected, as disclosed to the Texas Office of the Attorney General.
Despite the breach occurring in July 2024, impacted individuals were not notified until January 30, 2026 a delay that may have violated state and federal data breach notification laws. The exposed information heightens risks of identity theft and privacy violations for those affected. Legal investigations are underway to assess potential damages and cybersecurity improvements at Phia Group.
Source: https://www.classactionlawyers.com/blog/thephiagroup
The Phia Group, LLC cybersecurity rating report: https://www.rankiteo.com/company/the-phia-group-llc
"id": "THE1770199665",
"linkid": "the-phia-group-llc",
"type": "Breach",
"date": "7/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '24,903 Texas residents',
'industry': 'Healthcare',
'location': 'Massachusetts, USA',
'name': 'The Phia Group, LLC',
'type': 'Healthcare cost containment and compliance '
'services provider'}],
'attack_vector': 'Unauthorized Access',
'customer_advisories': 'Notification sent to affected individuals on January '
'30, 2026',
'data_breach': {'number_of_records_exposed': '24,903',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Addresses',
'Social Security numbers',
'Driver’s license numbers',
'Medical information',
'Health insurance details']},
'date_detected': '2024-07-09',
'date_publicly_disclosed': '2026-01-30',
'description': 'Schubert Jonckheer & Kolbe LLP is investigating a data breach '
'at The Phia Group, LLC, a Massachusetts-based healthcare cost '
'containment and compliance services provider for self-insured '
'health plans and third-party administrators. The incident '
'involved unauthorized access to Phia Group’s network between '
'July 8 and July 9, 2024, temporarily disrupting operations. '
'The breach exposed sensitive data, including names, '
'addresses, Social Security numbers, driver’s license numbers, '
'medical information, and health insurance details. The '
'company reported that 24,903 Texas residents were affected, '
'with notifications delayed until January 30, 2026, '
'potentially violating state and federal data breach '
'notification laws.',
'impact': {'brand_reputation_impact': 'Potential reputational damage due to '
'delayed notification',
'data_compromised': 'Sensitive health and personal information',
'downtime': 'Temporary disruption of operations',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential violations of state and federal '
'data breach notification laws',
'operational_impact': 'Disruption of services',
'systems_affected': 'Network'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Texas Office of the Attorney General'}],
'regulatory_compliance': {'legal_actions': 'Legal investigations underway by '
'Schubert Jonckheer & Kolbe LLP',
'regulations_violated': ['State data breach '
'notification laws',
'Federal data breach '
'notification laws'],
'regulatory_notifications': 'Disclosed to Texas '
'Office of the Attorney '
'General'},
'response': {'communication_strategy': 'Delayed notification to affected '
'individuals'},
'title': 'Phia Group Data Breach Exposes Sensitive Health and Personal '
'Information of Nearly 25,000 Texas Residents',
'type': 'Data Breach'}