UnknownOtherIDENTITY_GOVERNMENTPHIPIIHigh

PHREESIA, INC.

bd_38249521c5279ffc · schema v1 · pii pii-v1

Phreesia, Inc. based in Wilmington, Delaware, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-08-25 and reported on 2026-02-06. 1,530 Texas residents were affected. Types of information involved: Name of individual;Social Security Number Information;Medical Information;Health Insurance Information;Date of Birth. Consumers were notified via U.S. Mail.

Texas clock✗ TX AG >30d24 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,530 affectedView incident

Source provenance

Source URL: https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage#BR-0004817
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 6, 2026
Raw hash: 0a6a14d49fac864d09ba2c0250c3a8ef1c04183343ebc0c4ef3c0d80aa5a9060

Reporting entity

Name: PHREESIA, INC.
norm: phreesia
Domain: phreesia.com

Victim entity

Name: PHREESIA, INC.
norm: phreesia
Domain: phreesia.com
Industry: Otherllm

Incident

Discovered: Aug 25, 2025
Materiality determined: —
Notification sent: —
Affected individuals: 1,530
Data types: IDENTITY_GOVERNMENTPHIPII
Attack vector: Unknown
Threat actor: External

Compliance

Time to disclose: 24 weeks(165 days from discovery to filing)
Compliance flags: TX AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Extraction provenance

Status: No extraction artifact recorded for this disclosure.