
HR and payroll services company, PeopleGuru, experienced a major data breach between July 6, 2025, and July 9, 2025. The company detected the cybersecurity incident on July 9, 2025.
An investigation determined that a cybercriminal gained access to internal systems and may have acquired files containing sensitive information.
The data breach compromised both personally identifiable information (PII) and protected health information (PHI) including names, Social Security numbers, financial account information, dates of birth, passport numbers, driver’s license numbers, medical information and health insurance information.
This cyberattack is significant as the combination of compromised data puts individuals at risk for identity theft and medical or financial fraud. PeopleGuru began notifying affected individuals by mail on Oct. 16, 2025.
The data breach was also disclosed to multiple state authorities beginning on Oct. 16, 2025, including the California, Iowa, Maine, Montana, Oregon, Texas, Vermont and Washington attorneys general offices.
A total of 80,146 individuals were impacted across the nation, including 2,010 Texas residents, 1,861 in Washington, 1,053 Iowa residents, 19 in Montana and 974 in Maine.
PeopleGuru is offering affected individuals 12 months of complimentary TransUnion credit monitoring and identity restoration services.
If you receive a data breach notice from PeopleGuru, or your employer, you may want to:
PeopleGuru has also set up a dedicated assistance line for individuals with questions at 833-844-3117, available Monday through Friday from 8 a.m. to 8 p.m. Eastern Time.








.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)