Confirmed breach

PCH Digital data breach

USUnited States · FL · Technology and telecom · PCH Digital, LLC

PCH Digital (FL, United States) notified the California Attorney General, the Vermont Attorney General and the Texas Attorney General of a data breach on 11 November 2026. It told the states about 49,863 Texas residents; the total can be higher.

People affected: 49,863Texas residents · one state’s count, the total can be higher
Reported: 11 November 2026Official notice and 2 more
Time to tell: 280 daysfrom 4 February 2026 · the median is 147

Across the state notices: at least 50,161 people (Vermont and Texas: each state counts only its own residents)
Found to notice: 266 days (found 18 February 2026, by the company’s letter)

What was exposed 10

Social Security numbers
Driver’s license numbers
Government ID numbers
Health insurance details
Health and medical information
Financial account and card details
Passwords and logins
Dates of birth
Names
Addresses

How it happened

How: Hacking an unauthorized third party gained access to a portion of our computer network source

What changed since it was first reported

12 November 2026 Confirmed breach, 298 Vermont residents (Vermont Attorney General)
13 November 2026 Confirmed breach, 49,863 Texas residents (Texas Attorney General)

What the letter says

Found: On February 18, 2026, we detected suspicious activity in a portion of a legacy computer network.
Began: an unauthorized third party gained access to a portion of our computer network from February 4 to 18, 2026
People: This event impacted 403 Rhode Island residents.

Got a letter or email about this breach? Check it is real →

Read the letter (PDF), as filed with the California Attorney General.

Sources 3

Official notices are read by code from the regulator’s own register. More notices to California, Vermont, Texas. · Corrections and changes

If PCH Digital had your data

Look for PCH Digital, LLC’s own notice or letter: it should say what of yours was involved. Keep it.
Change your PCH Digital, LLC password, and the same password anywhere else you use it. Turn on two-step sign-in.
Call your bank on the number printed on your card (never one from a message), check recent payments and ask for a new card.
An ID number cannot be changed, so lock it: a credit freeze or fraud alert in the US, a credit warning (kreditadvarsel) on borger.dk in Denmark, Cifas protective registration in the UK.
Check your health insurer’s statements for treatment you never had.
Your home address is out: be wary of letters, parcels or visitors that mention PCH Digital, LLC, and of texts asking for a “delivery fee”.
Expect scams that use your details: calls, texts or emails pretending to be PCH Digital, LLC, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

Use PCH Digital? Hear first next time

Breach Radar tells you when a company you use is breached, and what to do. Free, and your list stays on your phone.

Download on the App Store

Questions about the PCH Digital breach

Was PCH Digital hacked?

What data was exposed in the PCH Digital breach?

Social Security numbers, Driver’s license numbers, Government ID numbers, Health insurance details, Health and medical information, Financial account and card details, Passwords and logins, Dates of birth, Names and Addresses, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. The letter it filed is on this page. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a PCH Digital data breach settlement?

No settlement open for claims is on record for PCH Digital as of 15 November 2026. A settlement usually comes a year or more after a breach, if a court approves one. Every open settlement is listed with its deadline.

Is a letter, email or text about the PCH Digital breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to PCH Digital’s own site, or check the letter here.

More breaches in United States

Every breach in United States →

Data breach settlements open for claims

Not about PCH Digital: settlements over other US data breaches that people can still claim money from.

Finastra file by 27 November 2026
Auxilio Mutuo Hospital file by 21 December 2026
Warner Music Group file by 22 January 2027

Every open settlement →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.