PeopleGuru, a company that provides HR and payroll services to employers, experienced a data breach. The company detected the cybersecurity incident on July 9, 2025. An investigation determined that a cybercriminal gained access to internal systems between July 6, 2025 and July 9, 2025, and may have acquired files containing sensitive information.
The data breach compromised both personally identifiable information (PII) and protected health information (PHI) were potentially compromised. Exposed information included names, Social Security numbers, financial account information, dates of birth, passport numbers, driver’s license numbers, medical information and health insurance information.
This cyberattack is significant as the combination of compromised data puts individuals at risk for identity theft and medical or financial fraud. PeopleGuru began notifying affected individuals by mail on Oct. 16, 2025.
The total number of people involved in the data breach has not been released, but is believed to include several companies that utilize PeopleGuru for payroll services. The data breach was also disclosed to the California Attorney General's office on Oct. 16, 2025.
After discovering the breach, PeopleGuru took steps to secure its network and launched a detailed review to identify affected clients and their employees. In addition to required state and federal disclosures, the company is offering affected individuals 12 months of complimentary TransUnion credit monitoring and identity restoration services.
If you receive a data breach notice from PeopleGuru, or your employer, you may want to:
PeopleGuru has also set up a dedicated assistance line for individuals with questions at 833-844-3117, available Monday through Friday from 8 a.m. to 8 p.m. Eastern Time.
More information about the HCM company can be found on the PeopleGuru website.