PIH Health Reports Data Security Incident Affecting Client Information
Cybersecurity2 min read

PIH Health Reports Data Security Incident Affecting Client Information

6 Mar 20266 Mar 2026 prnewswire.com

PIH Health, Inc. has reported a data security incident affecting certain personal information of individuals. The organization has taken measures to inform those affected and provide support.

Key Takeaways

  • 1.> "We are committed to transparency, and we provided notice of this event to the affected individuals along with resources to assist them," The breach, which was first confirmed on or about December 16, 2025, traces back to an unauthorized access event that occurred on December 1, 2024.
  • 2."We are committed to transparency, and we provided notice of this event to the affected individuals along with resources to assist them," said Debra Legan, Vice President of Marketing and Consumer Engagement at PIH Health.
  • 3.Legan asserted, "We are dedicated to ensuring the protection of our patients' information and will continue to work diligently to uphold that commitment." In an effort to support those affected, PIH Health has set up a toll-free call center to address questions and concerns regarding the incident.

PIH Health, Inc., based in Whittier, California, recently announced a data security incident that might impact the personal information of certain individuals. "We are committed to transparency, and we provided notice of this event to the affected individuals along with resources to assist them," said Debra Legan, Vice President of Marketing and Consumer Engagement at PIH Health.

"We are committed to transparency, and we provided notice of this event to the affected individuals along with resources to assist them,"

The breach, which was first confirmed on or about December 16, 2025, traces back to an unauthorized access event that occurred on December 1, 2024. Upon discovering this breach, the organization acted swiftly to secure its network and initiated an extensive investigation into what had transpired, including assessing whether any sensitive information had been compromised.

Person using laptop with holographic cybersecurity shield and digital interface elements
Person using laptop with holographic cybersecurity shield and digital interface elements

"Our investigation concluded that certain information was accessed by an unauthorized actor," Legan noted, emphasizing the urgency with which PIH Health responded. The organization enlisted the help of third-party specialists to conduct a thorough review of potentially affected data, a process that concluded on February 25, 2026.

"Our investigation concluded that certain information was accessed by an unauthorized actor,"

By the Numbers

By the Numbers

Data center server room with multiple monitors displaying code and red LED lighting
Data center server room with multiple monitors displaying code and red LED lighting

By the Numbers

Despite the breach, PIH Health has stated, "We have no evidence of the misuse, or attempted misuse, of any potentially affected information." However, the personal information that may have been compromised differs by individual and includes a variety of sensitive details. This could encompass names, addresses, dates of birth, driver's license numbers, Social Security numbers, taxpayer identification numbers, medical records, and health insurance information.

On February 27, 2026, PIH Health informed all individuals whose information may have been involved in the breach. Legan asserted, "We are dedicated to ensuring the protection of our patients' information and will continue to work diligently to uphold that commitment."

In an effort to support those affected, PIH Health has set up a toll-free call center to address questions and concerns regarding the incident. Call center representatives are available Monday through Friday, from 6:00 AM to 6:00 PM Pacific Time, and can be reached at 1-833-918-8201.

Looking Ahead

Looking Ahead

As the situation develops, PIH Health is likely to maintain transparency and provide updates as they work to reinforce their cybersecurity measures and ensure the ongoing protection of their patients' data. Further updates from the organization may shed light on additional steps being taken to prevent similar incidents in the future, alongside any new initiatives aimed at safeguarding personal information against potential threats.

More Stories