Phreesia Data Breach: What You Need to Know
Phreesia, Inc., a healthcare information technology company, recently announced a data breach that occurred on August 17, 2025, affecting 1,530 individuals across multiple states. This breach was discovered on August 25, 2025, and involved a vulnerability in third-party software.
Timeline of Events
- August 17, 2025: Breach occurred.
- August 25, 2025: Breach discovered by Phreesia.
- February 6, 2026: Incident reported by Phreesia to state authorities.
Impact Summary
The data breach impacted a total of 1,530 individuals, with reported incidents in Texas. It involved unauthorized access to Salesforce environments through a third-party software tool, Salesloft Drift.
Information Exposed
In Texas, the exposed information includes:
- Date of Birth
- Health Insurance Information
- Medical Information
- Name of individual
- Social Security Number Information
What Affected Individuals Should Do
Phreesia has arranged for affected individuals in California to enroll in a complimentary two-year identity and credit monitoring service through Kroll, which includes credit monitoring, fraud consultation, and identity restoration services. Individuals are encouraged to activate these services by visiting the enrollment website provided in the notice.
Company Response
Upon discovering the breach, Phreesia immediately ceased using the vulnerable software and engaged external cybersecurity experts to assess the incident's scope and nature. The company has implemented additional security measures to prevent future incidents and is reviewing its third-party risk management practices.
FAQ
Was my data exposed in the Phreesia, Inc. data breach?
If you are a resident of Texas and your personal information was stored in Phreesia's Salesforce environment, your data may have been exposed during this breach.
What information was stolen in the Phreesia, Inc. data breach?
The breach exposed personal information such as date of birth, health insurance information, medical information, name of the individual, and Social Security Number information in Texas.
How do I know if I was affected by the Phreesia, Inc. breach?
Affected individuals will be notified by Phreesia. If you have not received a notification but are concerned, you may contact Phreesia for further information.
Is there a lawsuit for the Phreesia, Inc. data breach?
There is no information provided about any lawsuits related to the Phreesia data breach at this time.
What should I do if my data was exposed in the Phreesia, Inc. breach?
Phreesia advises affected individuals to enroll in the free identity and credit monitoring services provided by Kroll to protect against potential fraud and identity theft.
How do I get free credit monitoring from Phreesia, Inc.?
Eligible individuals can enroll in complimentary credit monitoring services through Kroll by visiting the enrollment website provided in their notification letter from Phreesia.