Notice of Data Security Incident

PIH Health, Inc. (“PIH Health”) experienced a data security incident that may have involved personal and/or protected health information belonging to certain current and former patients and is providing notice of this incident to impacted individuals.

On or about December 16, 2025, PIH Health confirmed the presence of personal information in files identified to have been accessed or acquired without authorization during a December 1, 2024 incident. Upon becoming aware of this activity, PIH Health took immediate measures to secure the network and launched an investigation to evaluate what happened and determine if any sensitive or confidential information may have been affected as a result of the incident. The investigation concluded that certain information was accessed by an unauthorized actor. Subsequently, with the assistance of third-party specialists, PIH Health undertook a detailed and time-intensive review of all potentially affected data to identify whether any individual information was contained therein and worked to gather contact information needed to provide notification.

PIH Health has no evidence of the misuse, or attempted misuse, of any potentially affected information.

The potentially affected information may have included individuals’ names in combination with addresses, dates of birth, driver’s license information, Social Security numbers or individual taxpayer identification numbers, medical information, and health insurance information. Please note that not all data elements were affected for all individuals.

PIH Health has established a toll-free call center to answer questions about the event and address related concerns. Call center representatives are available Monday through Friday from 6:00 AM – 6:00 PM Pacific Time, excluding United States holidays and can be reached at 1-833-918-8201.

We are providing the following information to help those wanting to know more about steps they can take to help protect themselves and their information:

What steps can I take to protect my information?

  • Please notify your financial institution immediately if you detect any suspicious activity on any of your accounts, including unauthorized transactions or new accounts opened in your name that you do not recognize. You should also promptly report any fraudulent activity or any suspected incidents of identity theft to proper law enforcement authorities.
  • You can request a copy of your credit report, free of charge, directly from each of the three nationwide credit reporting agencies. To do so, free of charge once every 12 months, please visit www.annualcreditreport.com or call toll free at 1-877-322-8228. Contact information for the three nationwide credit reporting agencies is listed at the bottom of this page.
  • You can take steps recommended by the Federal Trade Commission to protect yourself from identify theft. The FTC’s website offers helpful information at www.ftc.gov/idtheft.

How do I get a copy of my credit report?

You may obtain a free copy of your credit report from each of the three major credit reporting agencies once every 12 months by visiting http://www.annualcreditreport.com/, calling toll-free 877-322-8228, or by completing an Annual Credit Report Request Form and mailing it to Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348. You can print this form at https://www.annualcreditreport.com/cra/requestformfinal.pdf. You also can contact one of the following three national credit reporting agencies:

How do I put a fraud alert on my account?

There are two kinds of general fraud alerts you can place on your credit report—an initial alert and an extended alert. You may want to consider placing either or both fraud alerts on your credit report. An initial fraud alert is free and will stay on your credit file for at least 90 days. The alert informs creditors of possible fraudulent activity within your report and requests that the creditor contact you prior to establishing any accounts in your name. You may have an extended alert placed on your credit report if you have already been a victim of identity theft and provide the appropriate documentary poof. An extended fraud alert is also free and will stay on your credit report for seven years. To place a fraud alert on your credit report, contact any of the three credit reporting agencies identified above. Additional information is available at http://www.annualcreditreport.com. Military members may also place an Active-Duty Military Fraud Alert on their credit reports while deployed. An Active-Duty Military Fraud Alert lasts for one year and can be renewed for the length of your deployment

How do I put a security freeze on my credit reports?

Under U.S. law, you have the right to put a credit freeze, also known as a security freeze, on your credit file, for up to one year at no cost. The freeze will prevent new credit from being opened in your name without the use of a PIN number that is issued to you when you initiate the freeze. A security freeze is designed to prevent potential creditors from accessing your credit report without your consent. As a result, using a security freeze may interfere with or delay your ability to obtain credit.

You must separately place a security freeze on your credit file with each credit reporting agency. There is no fee to place or lift a security freeze. For information and instructions on how to place a security freeze, contact any of the credit reporting agencies or the FTC identified above. In order to place a security freeze, you may be required to provide the consumer reporting agency with information that identifies you including your full name, Social Security number, date of birth, current and previous addresses, a copy of your state-issued identification card, and a recent utility bill, bank statement or insurance statement. After receiving your freeze request, each credit bureau will provide you with a unique PIN or password. Keep the PIN or password in a safe place as you will need it if you choose to lift the freeze.

A freeze remains in place until you ask the credit bureau to temporarily lift it or remove it altogether. If the request is made online or via phone, a credit bureau must lift the credit freeze within an hour. If the request is made by mail then the bureau must lift the freeze no later than three business days after receiving your request.