The Phia Group, LLC
bd_53856ef162652bd8 · schema v1 · pii pii-v1
Full breach record for The Phia Group, LLC →3 incidents on fileThe Phia Group, LLC, a healthcare cost containment provider, issued a supplemental notice to the New Hampshire Attorney General regarding a July 2024 security incident. Suspicious activity disrupted network operability, and data was potentially acquired between July 8-9, 2024. The incident affected 1,433 New Hampshire residents, exposing SSNs, driver's license numbers, and financial account information. Phia engaged forensic specialists, reported to law enforcement, and provided credit monitoring via Kroll. Notifications to residents occurred between January and April 2026.
J jump to incidentP pin to compareR raw source
Incident timeline
Jul 8, 2024
Begins
Jul 9, 2024
Discovered
May 14, 2026
Filed
vs. sector median
+87 wks slower
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- California State AGbd_f8a3f4c0b2d6866d2026-05-15 · +1dVerified
- South Carolina State AGbd_c206b062995998d42026-05-20 · +6dVerified
- Texas State AGbd_71f0f697bddeea282026-05-22 · +8dVerified by operator
- Nebraska State AGbd_7621a09039c596902026-04-23 · +21dVerified
Show 6 more filings ↓Show fewer ↑up to 106d gap
- Oregon State AGbd_3ca0825b760c7fe42026-02-07 · +96dVerified by operator
- Illinois State AGbd_271a07a19c0a459a2026-02-01 · +102dVerified
- California State AGbd_466553d842bc56d42026-01-30 · +104dCandidate
- Washington State AGbd_ab77d3136d2466cd2026-01-30 · +104dVerified
- New Hampshire State AGbd_db0c653aaa12ad942026-01-30 · +104dVerified
- Nebraska State AGbd_a840e2225354e4512026-01-28 · +106dVerified
Filing propagation · 11 filings · 8 states
View merged incident ↗Pattern: first filing Jan 28 (NE), last May 22 (TX) — a 114-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.