The Record reported a data breach at Perry Johnson Companies (United States) on 6 November 2026, and it has been confirmed. It affected 13,000,000 people.
What we know as of
Status
Confirmed.
People affected
13,000,000 people.
What was exposed
Social Security numbers, Health and medical information, Financial account and card details, Dates of birth, Names, Addresses, Insurance information and Medication names.
When
First reported 6 November 2026.
How
Stolen credentials.
Perry Johnson Companies’s record
No earlier breach on record under this name.
Not known yet: when it began and who was behind it. This page is updated as notices and statements come in.
Every fact above has its source below. Journalists: free to quote with credit (“Privacy Unpacked data breach tracker”, with a link to this page and the date); the figures can move. Follow this breach (feed) · Every major breach · Ask us for a figure
People affected
13,000,000people
Reported
6 November 2026News report
What was exposed 8
Social Security numbers
Health and medical information
Financial account and card details
Dates of birth
Names
Addresses
Insurance information
Medication names
How it happened
How
Stolen password or login hackers broke into Perry Johnson's systems by using an employee's credentials. The company did not use multi-factor authentication to verify userssource
Confirmed by state attorneys general from Connecticut, New Jersey, New York and Michigan: State attorneys general on Friday announced a health care services company has agreed to pay $300,000 and make sweeping changes to its security practices following a March 2023 breach
News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes
Questions about the Perry Johnson Companies breach
Was Perry Johnson Companies hacked?
The Record reported a data breach at Perry Johnson Companies (United States) on 6 November 2026, and it has been confirmed. It affected 13,000,000 people. How it happened, by the sources: stolen credentials.
What data was exposed in the Perry Johnson Companies breach?
Social Security numbers, Health and medical information, Financial account and card details, Dates of birth, Names, Addresses, Insurance information and Medication names, by the notices and reports on this page.
How do I know if I was affected?
Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.
Is there a Perry Johnson Companies data breach settlement?
No settlement open for claims is on record for Perry Johnson Companies as of 15 November 2026. A settlement usually comes a year or more after a breach, if a court approves one. Every open settlement is listed with its deadline.
Is a letter, email or text about the Perry Johnson Companies breach real or a scam?
A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to Perry Johnson Companies’s own site, or check the letter here.
Privacy Unpacked