What Is This About?

If you recently received a letter or an email from The Phia Group ("Phia") informing you that your sensitive personal or protected health information was compromised in a data breach, we would like to speak with you about your rights and potential legal remedies. Phia recently disclosed that it was the victim of a data breach that exposed individuals’ sensitive personal and protected health information.

What Happened?

On July 9, 2024, Phia became aware of a security incident on its computer network. Upon detection, Phia launched an investigation with the assistance of third-party cybersecurity experts to determine the nature and scope of the incident. The investigation determined that an unauthorized third party gained access to certain systems within Phia’s network between July 8 and July 9, 2024. Phia conducted a comprehensive review of the impacted data to determine what information was compromised and identified affected individuals. On October 11, 2025, Phia reported the breach to the Massachusetts Attorney General and provided notice to 23 Massachusetts residents. On January 28, 2026, Phia filed a public notice and began sending out notice letters to the impacted individuals.

What Information Was Impacted?

Upon information and belief, the following types of sensitive personal and protected health information may have been compromised:

• • • • Names;
      • Addresses;
      • Dates of birth;
      • Social Security numbers;
      • Medical information;
      • Prescription information;
      • Health insurance information;
      • Provider information;
      • Treatment and/or diagnosis information;
      • Treatment dates;
      • Dates of birth;
      • Lab or test results;
      • Patient account and/or medical record numbers;
      • Medicare/Medicaid information;
      • Driver's license or state identification card numbers;
      • Other government issued identifications; and
      • Financial account information.

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected users are entitled to compensation. If you received a notice from The Phia Group there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.