What Is This About?

If you received a letter or email about a data breach from Paylogix LLC (“Paylogix”) of New York, your sensitive personal information or protected health information may have been compromised in a recent data breach. Our firm is investigating this incident and can help you understand your rights and potential legal options.

What Happened?

In November 2025, Paylogix, a third-party insurance administrator that provides technology solutions to various insurance carriers, experienced a data breach that affected sensitive personal information and protected health information. Paylogix has not indicated when it first detected the breach or any suspicious activity that might have led them to discover the breach. After detection, Paylogix took steps to contain the disruption, secure its systems, and initiate an investigation into the nature and scope of the breach. Paylogix determined that certain of its computer systems were subject to unauthorized access and certain files copied from its network between November 13, 2025 and November 18, 2025. Paylogix then undertook a review of the implicated files to determine what information was present on them and the persons to whom the information relates. On January 15, 2026, the ransomware group known as Akira claimed responsibility for a breach of Paylogix, claiming to have stolen 185 GB of data.

On August 17, 2026, Paylogix reported the breach to the Attorney General of South Carolina, disclosing that 64,383 South Carolina residents are affected. Paylogix has also reported the breach to the Attorneys General of Massachusetts and Vermont, and to the Massachusetts Office of Consumer Affairs and Business Regulation. Thousands of people were reported affected in each of these states. Paylogix has sent out notice of the breach to individuals it identified as potentially affected.

What Information Was Impacted?

According to Paylogix’s public disclosures, the following categories of information, varying from person to person and across patients and employees, may have been compromised:

• Name;
• Date of birth;
• Social Security number or Taxpayer Identification number;
• IRS PIN number;
• Voluntary benefit information;
• Passport number;
• U.S. alien identification number;
• Access credentials (username, password);
• Financial account information;
• Driver’s license or other government-issued ID number;
• Electronic signature;
• Medical information; and
• Health insurance information.

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected persons are entitled to compensation. If you received a notice, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.