HackingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICHEALTH_BASICPIILowContained

The Phia Group, LLC

bd_466553d842bc56d4 · schema v1 · pii pii-v1

Full breach record for The Phia Group, LLC →

The Phia Group, LLC notified California residents of a data security incident discovered on July 9, 2024. Unauthorized access occurred between July 8 and July 9, 2024, potentially exposing names and health-related information. The company engaged forensic specialists, secured systems, and offered credit monitoring services.

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

bd_ab77d3136d2466cdWashington State AGfiled 2026-01-30Verified
bd_db0c653aaa12ad94New Hampshire State AGfiled 2026-01-30Verified
bd_53856ef162652bd8New Hampshire State AGfiled 2026-05-14(104d gap)Verified
bd_f8a3f4c0b2d6866dCalifornia State AGfiled 2026-05-15(105d gap)Verified

Show 1 more filing ↓up to 110d gap

bd_c206b062995998d4South Carolina State AGfiled 2026-05-20(110d gap)Verified

Source provenance

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-617858
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 30, 2026
Raw hash: f7f3bb370ffcf2dda61080f6dbc63bebb0f673f635742d1a5144b6c5c075ece4

Reporting entity

Name: The Phia Group, LLC
norm: the phia

Victim entity

Name: The Phia Group, LLC
norm: the phia

Incident

Discovered: Jul 9, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: IDENTITY_BASICHEALTH_BASICPII
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported the incident to law enforcement

Compliance

Time to disclose: 19 months(570 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.