Paylogix Data Breach Exposes Social Security Numbers

Paylogix, a New York-based insurtech company that provides technology and billing solutions for voluntary employee benefits, disclosed a data breach that occurred in November 2025.

Paylogix posted a notice of the data event on its website stating that between Nov. 13 and Nov. 18, 2025, unauthorized individuals gained access to certain Paylogix computer systems and copied files from the company's network. According to the company's notification, Paylogix "experienced a network disruption involving certain computer systems and services" as part of what it described as a "cyber event."

Approximately two months later, on Jan. 15, 2026, a ransomware group known as Akira claimed responsibility for the attack in a posting on the dark web. The group stated it had obtained 185 GB of data from Paylogix.

According to the dark web posting, the compromised data reportedly included employee personal information, with records containing details such as Social Security numbers, passport information and driver's license data. The posting also referenced client information, detailed financial records, internal confidential files and non-disclosure agreements.

The types of information exposed varied by individual. According to the company's notice, affected data may have included date of birth, Social Security number and voluntary benefit information. In more limited cases, the breach also involved access credentials, driver's license number, electronic signature, financial account information, financial account number, health insurance information, IRS PIN number, medical information, passport number, state identification number, taxpayer identification number and U.S. alien identification number.

Paylogix's response

After discovering the network disruption, Paylogix stated that it promptly took steps to contain the event and restore affected systems to what it described as "secure, full functionality." The company initiated a thorough investigation to determine the nature and scope of the breach and undertook a comprehensive review of the potentially involved files to identify what information was present and to whom it related.

Paylogix stated that it notified both federal and local law enforcement agencies and is cooperating with their ongoing investigation. According to the notice, the notification to consumers was not delayed by law enforcement. The company said that "the confidentiality, privacy, and security of information in our care are among our highest priorities" and that it moved quickly "to investigate this event, assess the security of our systems, and understand the information involved."

Paylogix acknowledged "the evolving nature of cybersecurity" and committed to continuing to "evaluate and enhance our security posture in the future" as part of its ongoing commitment to information security.

The company is working to set up a dedicated call center to answer questions related to the event. Until the call center is available, individuals may write to Paylogix at 1025 Old Country Rd. #310, Westbury, NY 11590.