Phoenix House Foundation, Inc. and its affiliates notified individuals that a third-party payroll consultant made unauthorized changes to electronic payroll systems on December 19, 2014. The company discovered the activity on December 22, 2014. Affected data includes names, addresses, Social Security numbers, salary, and benefit information for current and former employees. The consultant's access was removed, the contract terminated, and law enforcement notified. A comprehensive security review is underway.