The Phia Group data breach
The Phia Group appears in 10 breach notices filed with Vermont AG, Texas AG, SC Consumer Affairs, California AG, New Hampshire DOJ, Oregon DOJ, Washington AG and Montana DOJ, most recently reported on July 4, 2026.
Also listed as: The Phia Group, LLC; Phia Group
Breach notices filed with regulators
| Reported | Filed with | Breach date(s) | People affected | Data involved | Source |
|---|---|---|---|---|---|
| Jul 4, 2026 | Vermont AG | Not listed | 989 Vermont residents | Social Security NumbersFinancial Account CodesCredit and Debit Account InfoGovernment ID Numbers | Vermont AG list ↗ |
| May 22, 2026 | Texas AG | Jul 8, 2024 – Jul 9, 2024 | 121,354 Texas residents | Name of individualAddressSocial Security Number InformationDriver’s License numberFinancial Information (e.g. account number, credit or debit card number)Medical InformationHealth Insurance Information | Texas AG list ↗ |
| May 20, 2026 | SC Consumer Affairs | Not listed | 3,057 South Carolina residents | Not listed | Notice ↗ |
| May 15, 2026 | California AG | Jul 8, 2024 | Not listed | Not listed | California AG list ↗ |
| May 14, 2026 | New Hampshire DOJ | Not listed | Not listed | Not listed | Notice ↗ |
| Feb 7, 2026 | Oregon DOJ | Dec 1, 2025 | 40,366 Oregon residents | Not listed | Oregon DOJ list ↗ |
| Jan 30, 2026 | California AG | Jul 8, 2024, Jul 9, 2024 | Not listed | Not listed | California AG list ↗ |
| Jan 30, 2026 | Washington AG | Jul 8, 2024 – Jul 9, 2024 | 2,802 Washington residents | Medical InformationNameSocial Security NumberDriver's License or Washington ID Card NumberFull Date of BirthHealth Insurance Policy or ID Number | Washington AG list ↗ |
| Jan 30, 2026 | New Hampshire DOJ | Not listed | Not listed | Not listed | Notice ↗ |
| Jan 29, 2025 | Montana DOJ | Jul 8, 2024 – Jul 9, 2024 | 8,074 Montana residents | Not listed | Notice ↗ |
Each row is a notice as published by the agency. For state lists, the number affected counts only that state's residents; HHS lists the total reported. SEC rows are Form 8-K Item 1.05 filings, which usually don't give a count. A notice does not mean a settlement exists, and a settlement may cover a different incident than a given notice.
Is there a settlement?
We don't track an open class-action settlement for The Phia Group right now. Settlements usually come months or years after a breach. Get an email when new settlements are announced.
What you can do now
- Read the notice letter if you got one. It says what data was involved and may offer free credit monitoring with an enrollment deadline.
- Consider a free credit freeze at Equifax, Experian and TransUnion, especially if your Social Security number was involved.
- Change reused passwords and turn on two-factor authentication.
- Watch your bank, card and insurance statements for activity you don't recognize.
Get new settlements and deadline reminders
One email a week: newly announced data-breach settlements and claim deadlines that are about to close. Free. Unsubscribe anytime.