Press Ganey Associates Data Breach Affects 23,899

On Sept. 10, 2025, Press Ganey Associates reported a data breach to the U.S. Department of Health and Human Services (HHS) that affected 23,899 individuals in the United States. The breach was disclosed through the official HHS breach reporting portal and reported as a hacking incident.

The cybersecurity incident compromised both personally identifiable information (PII) and protected health information (PHI). Exposed data may include names, addresses, dates of birth, Social Security numbers, health insurance information and detailed medical records.

This type of cyberattack puts impacted individuals at risk for identity theft and fraud.

Press Ganey Associates' response

In addition to required state and federal disclosures, Press Ganey will notify impacted individuals by mail.

If you believe your personal information may have been compromised in this breach:

• Carefully review any notice or communication you receive from Press Ganey Associates or your medical provider.
• Monitor financial accounts and credit reports for signs of identity theft.
• Consider placing fraud alerts or credit freezes with the major credit bureaus.
• Be cautious of unsolicited emails or phone calls requesting personal information.

For more information about the company, visit the Press Ganey website.