PeopleGuru Holdings, Inc.

PeopleGuru Holdings, LLC notified the New Hampshire Attorney General on October 16, 2025, of a cybersecurity event discovered on July 9, 2025. An unauthorized third party gained access to systems between July 6 and July 9, 2025, potentially viewing or taking personal information of 240 NH residents. Data types included names, SSNs, financial account info, driver's license numbers, and health/medical information. PeopleGuru notified law enforcement, offered 12 months of credit monitoring via TransUnion, and implemented additional employee safeguards.

Affected (this filing): 240

PeopleGuru Holdings, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2025-10-16. The breach occurred during 7/6/2025 - 7/9/2025. The breach was discovered on 9/15/2025. 80,146 individuals were affected. Notice was sent on 10/16/2025.

Affected (this filing): 80,146

PeopleGuru Holdings, LLC, a technology sector entity reported a data breach to the Iowa Attorney General. The breach was reported on 2025-10-16.

PeopleGuru Holdings, LLC reported a data breach to the Montana Attorney General. The breach was reported on 2025-10-16. The breach occurred from 07/06/2025 to 07/09/2025. 19 Montana residents were affected.

Affected (this filing): 19

PeopleGuru Holdings, Inc., a business sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2025-07-09 and filed notice on 2025-10-16. 1,861 Washington residents were affected. 99 days elapsed between awareness and notification. 3 days to identify the breach. 0 days to contain the breach.

Affected (this filing): 1,861

PeopleGuru Holdings, Inc. reported an external system breach that occurred on July 6, 2025. The company discovered the breach on September 15, 2025, and notified the 756 affected Maine residents on October 16, 2025. As part of its response, the company offered 12 months of identity theft and monitoring services.

Affected (this filing): 756

PeopleGuru Holdings, Inc. notified the California Attorney General of a cybersecurity event where an unauthorized third party accessed network systems between July 6 and July 9, 2025. The company became aware of the incident on July 9, 2025. Affected data may include names, Social Security numbers, financial account information, dates of birth, passport numbers, driver's license numbers, medical information, and health insurance information. The company secured the network, investigated the incident, and is offering 12 months of credit monitoring and identity restoration services via TransUnion. Approximately 500 Rhode Island residents were also impacted.