• January 2026 •

The Phia Group Data Breach

Last Updated on January 30, 2026

If your information was compromised in the Phia Group data breach, you may be able to start a class action to collect money for the harm you’ve suffered.

• Keep reading for more information

At A Glance

What's Going On?: Attorneys need to hear from people affected by the Phia Group data breach as they investigate whether a class action lawsuit can be filed.
What You Can Do: If you believe your information may have been compromised in the Phia Group data breach, fill out the form on this page to learn more about the investigation and how you can help.
Does This Cost Anything?: It costs nothing to get in touch or to talk to someone about your rights.
What Can I Get?: If filed and successful, a class action lawsuit could provide consumers with money for any harm resulting from the Phia Group breach.

Phia Group Data Breach: Lawsuit Investigation

Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the Phia Group data breach.

As part of their investigation, they need to hear from individuals who had their information exposed in the incident, including those who received notice of the Phia Group data breach or otherwise believe they are affected.

Phia Group Security Incident: What Happened?

The Phia Group, LLC has reported that a cybersecurity incident may have affected personal and health information tied to certain health benefit plans, including that of plan participants and other clientele.

The company first detected suspicious activity that briefly disrupted its computer network on July 9, 2024. Phia launched an investigation with the assistance of digital forensic specialists and determined that certain data may have been obtained without authorization between July 8 and July 9 of that year.

In a notice posted on its website, Phia said it advised applicable clients on December 4, 2025 that information related to health benefit plans and certain associated individuals may have been involved. The company is coordinating with these entities to notify people impacted by the Phia Group data breach.

A review of the potentially exposed information indicated that the Phia data breach may have involved names, addresses, dates of birth, Social Security numbers, financial account information and driver’s license or state ID numbers. Medical and health insurance data—such as prescription details, provider and patient information, treatment data and Medicare and Medicaid information—was also reportedly impacted.

The Phia Group is a Canton, Massachusetts-based company that works with health benefit plans and their third-party administrators to provide healthcare cost containment techniques aimed at controlling healthcare and plan costs.

What You Can Do After the Phia Group Data Breach

If your information was exposed in the Phia Group data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.

A successful case could also force Phia Group to ensure they take proper steps to protect the information they were entrusted with.

Affected by the Phia Group data breach? Fill out the form on this page today.