The Phia Group, a healthcare third-party administrator, experienced a data security incident in early 2026. This led to the filing of lawsuits, including In re Phia Group LLC Data Security Litigation, in the District Court, D. Massachusetts.
The specific types of data exposed and the number of affected individuals have not been publicly confirmed. No official breach notification letters or statements from the company have been found at this time. The incident has not yet appeared on the HHS OCR breach portal or other state Attorney General breach portals aside from the initial California Attorney General listing.
Details about the breach can emerge later, and official notices may be delayed.