Paylogix, a New York company that helps employers run voluntary benefits, says hackers got into its network and copied files on 41,739 people. The stolen data includes Social Security numbers and dates of birth. If your employer uses a benefits provider, a breach notice could show up in your mail.
What happened at Paylogix
Paylogix handles enrollment, billing and management of voluntary employee benefits. It runs software that employers use online. Its investigation found that an unauthorized outsider was inside its network from November 13 to November 18, 2025. During that time, files with personal and health information were accessed and copied.
The company reported the breach to the HHS Office for Civil Rights, the federal office that tracks health data breaches. Its letter described a network disruption. The HIPAA Journal says this appears to be a ransomware attack by a group called Akira, which claimed to have taken 185 GB of data. The letters do not say that.
What was taken
Everyone affected had dates of birth, Social Security numbers and voluntary benefit information exposed. Some people lost more. For a smaller group, the list also includes:
- Access credentials and electronic signatures
- Financial account and health insurance information
- Medical information
- Passport numbers, taxpayer ID numbers and alien ID numbers
Three other breaches
The same report covers three other health groups. The Kenaitze Indian Tribe in Alaska notified 9,319 people. Hackers were in its network from July 16 to July 27, 2026, and Social Security numbers and medical information were exposed. Notices began going out September 25, 2026.
The Center for Bone and Joint Surgery of the Palm Beaches in Florida reported 5,461 people affected after website forms were compromised. It found no proof that patient data was obtained or misused. Wichita Family Dental in Kansas said an employee email account held data on 1,273 people, including Social Security numbers and dental records.
What to do
- Watch your mail for a breach notice, and do not throw it out.
- Freeze your credit with the three credit bureaus. It is free.
- Check bank, card and insurance statements for anything you do not recognize.
- Be wary of calls or emails that mention your benefits or health plan.
The takeawayIf a breach notice arrives, freeze your credit and watch your accounts, since Social Security numbers do not expire.