FedEx Group Health Plan Reports Data Breach Affecting Over 1,000 Individuals On December 1, 2025, FedEx Corporation Group Health Plan disclosed a cybersecurity incident that exposed the personally identifiable information (PII) and protected health information (PHI) of at least 1,066 individuals across the U.S. The breach impacted active and former employees enrolled in the company’s medical, dental, vision, and COBRA continuation coverage plans. The compromised data may include names, contact details, Social Security numbers, medical plan information, health claims, and dependent records. While FedEx has not released specifics on the breach’s method or timeline, it confirmed the incident to the U.S. Department of Health and Human Services on the same day. In response, FedEx has notified federal authorities and is expected to contact affected individuals directly. Though the company has not detailed its mitigation efforts, similar breaches often involve credit monitoring or identity protection services for impacted parties. The exposure of both PII and PHI raises concerns about potential fraud, including unauthorized medical billing or identity theft. Affected individuals are advised to monitor health insurance statements and credit reports for suspicious activity.