Phillip Galyen, PC
ent_ed86c41cf68a638d375b21a2
Disclosures
11
State AG · 11 jurisdictions
Incidents
2
filings grouped by incident
Max affected reported
12,225
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Phillip Galyen, PC
- Normalized
- phillip galyen— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (11)newest first
- ⭐Texas State AGas victim2026-05-22
Phillip Galyen P.C. dba Bailey & Galyen based in Bedford, Texas, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-11-04 and reported on 2026-05-22. 11,038 Texas residents were affected. 12,225 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Medical Information;Health Insurance Information. Consumers were notified via U.S. Mail.
- 🍁Vermont State AGas victim2026-05-21
Phillip Galyen P.C. dba Bailey & Galyen reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-05-21. The reporting organization type is Other Commercial. 4 Vermont residents were affected. Categories of data breached: Social Security Numbers.
- ⛰️New Hampshire State AGas victim2026-05-20
Bailey & Galyen, a law firm, notified the New Hampshire Attorney General of a data event affecting 3 state residents. An unknown actor accessed the network on November 4, 2025, potentially downloading names and Social Security numbers. The firm engaged external cybersecurity experts, secured the network, and offered 12 months of credit monitoring and ID theft recovery services to affected individuals.
- 🏎️Indiana State AGas victim2026-05-19
Phillip Galyen PC dba Bailey & Galyen reported a data breach to the Indiana Attorney General. The breach occurred on 2025-11-04 and was reported on 2026-05-19. 14 Indiana residents were affected. 12,225 individuals affected in total.
- 🏛️Massachusetts State AGas victim2026-05-01
Phillip Galyen P.C. dba Bailey & Galyen, a law firm, notified Massachusetts residents of a data security incident affecting personal information. The notification, dated May 19, 2026, indicates unauthorized access to client data. Affected individuals were offered 24 months of credit monitoring and identity theft protection services via IDX. Specific data types and affected counts were not explicitly quantified in the provided notice text.
- 🐻California State AGas victim2021-05-14
In March 2021, Phillip Galyen PC (a law firm) discovered unusual activity within its network. Investigation revealed a malicious actor may have accessed the network without authorization and may have acquired personal information of clients and employees, including names, dates of birth, driver's license numbers, SSNs, payment card data, biometric data, and medical information. The firm notified the FBI and offered credit monitoring to affected individuals.
- 🦞Maine State AGas victim2021-05-14
Phillip Galyen PC reported an external system breach (hacking) occurring on 03/01/2021 and discovered on 04/01/2021. The incident compromised names and financial account/credit card numbers. The number of affected individuals is unknown. Substitute notice was sent on 05/14/2021, and identity theft protection services were offered.
- 🌴South Carolina State AGas victim2021-05-14
Phillip Galyen, PC reported a potential data security incident in March 2021 where unauthorized access to its network may have exposed client and employee personal information, including names, SSNs, driver's licenses, financial data, and medical/biometric records. The firm engaged forensic investigators, notified the FBI, and is offering credit monitoring services. The investigation was ongoing as of the May 14, 2021 notification.
- 🦫Oregon State AGas victim2021-05-14
Phillip Galyen PC reported a data breach to the Oregon Attorney General. The breach was reported on 2021-05-14. The breach occurred during 3/1/2021 - 4/1/2021. The breach was discovered on 4/26/2021. 250 individuals were affected. Notice was sent on 5/14/2021.
- 🦬Montana State AGas victim2021-05-14
Phillip Galyen, PC reported a data breach to the Montana Attorney General. The breach was reported on 2021-05-14. The breach occurred from 3/1/2021 to 3/31/2021.
- 💎Delaware State AGas victim2021-05-13
Phillip Galyen, PC notified Delaware AG on May 14, 2021, of a March 2021 unauthorized network access. Malicious actors may have accessed client and employee data including names, SSNs, driver's licenses, financial account numbers, and medical/biometric records. Galyen hired forensic investigators, notified the FBI, and offered credit monitoring. No specific count of affected individuals was disclosed.