PIH Health Data Breach Exposes Sensitive Information of Thousands On March 9, 2026, Murphy Law Firm announced an investigation into a data breach at PIH Health, Inc., a California-based healthcare provider, after cybercriminals infiltrated its inadequately secured network. The breach, discovered following suspicious activity, allowed unauthorized access to files containing highly sensitive personal data. The exposed information includes names, Social Security numbers, medical records, health insurance details, financial account information, and driver’s license numbers affecting thousands of individuals. Forensic analysis confirmed that attackers potentially acquired this data, raising risks of identity theft and dark web sales. PIH Health has notified impacted individuals, and Murphy Law Firm is pursuing legal action, including a potential class action lawsuit, to seek damages for those affected. The firm specializes in data breach litigation and has a history of securing recoveries for victims of similar incidents.

PIH Health Data Breach Exposes Personal Information in Targeted Cyberattack PIH Health, a healthcare provider, suffered a significant data breach between November 14 and December 2, 2024, after detecting unusual network activity on December 1, 2024. The company swiftly secured its systems and launched an investigation with third-party cybersecurity experts. By December 16, 2025, PIH Health confirmed that unauthorized access had exposed files containing personal information. The review process concluded on February 25, 2026, identifying affected individuals, and the breach was officially disclosed to the California Attorney General on February 27, 2026. The incident impacted individuals across multiple states, including at least 174 Rhode Island residents. A threat actor known as Dreamer2000 claimed responsibility for the breach on December 13, 2024, posting details on an open web forum and characterizing it as a targeted data leak attack. In response, PIH Health is offering complimentary identity protection services through Experian IdentityWorks, including credit monitoring, identity restoration support, and up to $1 million in identity theft insurance for affected individuals. While no misuse of the exposed data has been reported, the company has implemented additional security measures to prevent future incidents. Affected individuals were notified via mail with enrollment instructions for the protection services. Support is available through Experian’s customer care team for identity restoration and credit monitoring.

The California Office of the Attorney General disclosed a data breach at PIH Health in January 2020, stemming from a targeted phishing campaign between June 11–19, 2019. Unauthorized actors gained access to employee email accounts, compromising sensitive data of 159,879 California residents. Exposed information included names, Social Security numbers, driver’s license numbers, medical records, health insurance details, and online account credentials—posing severe risks of identity theft, financial fraud, and privacy violations. The breach originated from human error (falling for phishing scams), highlighting vulnerabilities in employee cybersecurity awareness and email security protocols. While no ransomware was involved, the scale and sensitivity of the leaked data—particularly medical and financial records—elevate the incident’s gravity, directly impacting both internal employees (whose credentials were exploited) and customers/patients (whose personal and health data was exposed). The breach underscores systemic weaknesses in safeguarding high-value targets like healthcare providers, where data integrity is critical for trust and regulatory compliance.