Privacy Unpacked

Confirmed breach

Premise Health Holding data breach

USUnited States · TN · Healthcare · Premise Health Holding Corp

Premise Health Holding (TN, United States) notified the Vermont Attorney General, the California Attorney General, the Texas Attorney General and the Washington Attorney General of a data breach on 6 November 2026. It told the states about 261,654 Texas residents; the total can be higher.

What we know as of

Status
Confirmed: on record with the Vermont Attorney General, the California Attorney General, the Texas Attorney General and the Washington Attorney General.
People affected
At least 313,046 people (3 states’ counts added up; the total can be higher).
What was exposed
Social Security numbers, Health insurance details, Health and medical information, Dates of birth, Names and Addresses.
When
Began 26 March 2026, found 18 September 2026, first reported 6 November 2026.
How
Insider.
Premise Health Holding’s record
No earlier breach on record under this name.

Not known yet: who was behind it. This page is updated as notices and statements come in.

Every fact above has its source below. Journalists: free to quote with credit (“Privacy Unpacked data breach tracker”, with a link to this page and the date); the figures can move. Follow this breach (feed) · Every major breach · Ask us for a figure

People affected
261,654Texas residents · one state’s count, the total can be higher
Reported
6 November 2026Official notice and 3 more
Time to tell
225 daysfrom 26 March 2026 · the median is 147
Across the state notices
at least 313,046 people (Vermont, Texas and Washington: each state counts only its own residents)
Found to notice
49 days (found 18 September 2026, by the company’s letter)

What was exposed 6

  • Social Security numbers
  • Health insurance details
  • Health and medical information
  • Dates of birth
  • Names
  • Addresses

How it happened

How
Insider an employee had violated company information security policies and misappropriated certain company data source

What changed since it was first reported

  1. Confirmed breach, 261,654 Texas residents (Texas Attorney General)

What the letter says

Found
On September 18, 2026, Premise Health Holding Corp. ("Premise Health") discovered that an employee had violated company information security policies and misappropriated certain company data
Began
misappropriated certain company data beginning on or about March 26, 2026
Exposed
Relevant personal information included, in part or whole, your name, address, date of birth, government identification number such as Social Security number, health insurance information, diagnostic or other treatment information and other information provided to us in connection with your eligibility for services with or relationship with Premise Health

Got a letter or email about this breach? Check it is real →

Read the letter (PDF), as filed with the California Attorney General.

Sources 4

Official notices are read by code from the regulator’s own register. More notices to Vermont, California, Texas, Washington. · Corrections and changes

Questions about the Premise Health Holding breach

Was Premise Health Holding hacked?

Premise Health Holding (TN, United States) notified the Vermont Attorney General, the California Attorney General, the Texas Attorney General and the Washington Attorney General of a data breach on 6 November 2026. It told the states about 261,654 Texas residents; the total can be higher. How it happened, by the sources: insider.

What data was exposed in the Premise Health Holding breach?

Social Security numbers, Health insurance details, Health and medical information, Dates of birth, Names and Addresses, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. The letter it filed is on this page. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a Premise Health Holding data breach settlement?

No settlement open for claims is on record for Premise Health Holding as of 15 November 2026. A settlement usually comes a year or more after a breach, if a court approves one. Every open settlement is listed with its deadline.

Is a letter, email or text about the Premise Health Holding breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to Premise Health Holding’s own site, or check the letter here.

More breaches in United States

  1. EZaccessMDreportedUSUnited States · 14 November 2026 Social Security numbersHealth and medical informationDates of birth+5 –not reported
  2. UberUSUnited States · CA · 14 November 2026 License information 7.9Kdrivers
  3. USA DeBuskUSUnited States · TX · 13 November 2026 Social Security numbersDriver’s license numbersGovernment ID numbers+6 11KTexas residents
  4. NTN Bearing Corporation of AmericaUSUnited States · 13 November 2026 Social Security numbers 1Vermont residents
  5. WalgreenUSUnited States · 20 February 2026 2Washington residents

Every breach in United States →

Data breach settlements open for claims

Not about Premise Health Holding: settlements over other US data breaches that people can still claim money from.

Every open settlement →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.