The Phia Group, LLC

The Phia Group, LLC reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-07-04. The reporting organization type is Other Commercial. 989 Vermont residents were affected. Categories of data breached: Social Security Numbers, Financial Account Codes, Credit and Debit Account Info, Government ID Numbers.

The Phia Group, LLC based in Canton, Massachusetts, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-12-01 and reported on 2026-05-22. 121,354 Texas residents were affected. 1,512,742 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Driver’s License number;Financial Information (e.g. account number, credit or debit card number);Medical Information;Health Insurance Information. Consumers were notified via Posted at company website or special website;U.S. Mail;Broadcast on Texas-wide Media.

The Phia Group, LLC notified South Carolina AG of a data security incident affecting approximately 3,470 individuals. Suspicious activity was discovered on July 9, 2024, involving unauthorized access to personal information (names) between July 8-9, 2024. The company engaged forensic specialists, reported to law enforcement, and provided 12 months of identity monitoring via Kroll.

The Phia Group, LLC experienced a data security incident involving ransomware that disrupted network operability. Suspicious activity was discovered on July 9, 2024, with data potentially acquired between July 8 and July 9, 2024. Affected data includes names and health-related information. The company engaged forensic specialists, secured the environment, and offered credit monitoring services.

The Phia Group, LLC, a healthcare cost containment provider, issued a supplemental notice to the New Hampshire Attorney General regarding a July 2024 security incident. Suspicious activity disrupted network operability, and data was potentially acquired between July 8-9, 2024. The incident affected 1,433 New Hampshire residents, exposing SSNs, driver's license numbers, and financial account information. Phia engaged forensic specialists, reported to law enforcement, and provided credit monitoring via Kroll. Notifications to residents occurred between January and April 2026.

The Phia Group, LLC notified individuals of a data security incident beginning July 8, 2024, involving suspicious activity disrupting its network. The incident potentially affected personal information (names) of plan participants. The company engaged forensic specialists, secured the environment, reported to law enforcement, and provided credit monitoring via Kroll. No evidence of fraudulent misuse was found.

The Phia Group, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2026-02-07. The breach occurred during 12/1/2025. The breach was discovered on 12/1/2025. 40,366 individuals were affected. Notice was sent on 12/4/2025.

THE PHIA GROUP filed a data-breach notice with the Illinois Attorney General in February 2026 (case 26-02-795). The register records the breach as discovered on July 9, 2024. Personal information types reported: drivers license, financial account number, medical information, security question answer, ssn, username password. Additional entities named: AGCO, HCR MANOCARE, JBS USA FOOD COMPANY HOLDINGS, STATE OF IL. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

The Phia Group, LLC notified California residents of a data security incident discovered on July 9, 2024. Unauthorized access occurred between July 8 and July 9, 2024, potentially exposing names and health-related information. The company engaged forensic specialists, secured systems, and offered credit monitoring services.

Supplemental Washington AG notice for The Phia Group regarding unauthorized access to data between July 8-9, 2024. Discovered July 9, 2024. Affected 28,692 Washington residents. Data included SSN, driver's license, financial accounts, DOB, and PHI. Notifications mailed Jan-Apr 2026. Forensic investigation engaged; law enforcement notified.

The Phia Group, LLC, a healthcare cost containment provider, notified the New Hampshire Attorney General of a data security incident affecting 13 NH residents. Suspicious activity was detected on July 9, 2024, involving unauthorized access to personal information, including Social Security Numbers, between July 8-9, 2024. The company engaged forensic specialists, reported to law enforcement, and provided credit monitoring services to affected individuals. No evidence of fraudulent misuse was found.

The Phia Group, a healthcare cost containment provider, notified the Nebraska Attorney General of a data security incident affecting approximately 136 Nebraska residents. Suspicious activity was discovered on July 9, 2024, involving unauthorized access to personal information, including Social Security Numbers and Driver's License/State ID Numbers. The company engaged forensic specialists, reported to law enforcement, and provided credit monitoring services via Kroll to affected individuals.

The Phia Group, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-10-11. 2,779 Massachusetts residents were affected.