90 Degree Benefits Data Breach Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the HPHG, LLC dba 90 Degree Benefits data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About HPHG, LLC dba 90 Degree Benefits
HPHG, LLC, doing business as 90 Degree Benefits, is a Texas-based company that provides third-party administration (TPA) services for self-funded health benefit plans. The company works with employers to design and manage health plans, focusing on cost containment and efficient plan administration. With its headquarters in San Antonio, Texas, and additional offices in Lubbock, Texas, 90 Degree Benefits has grown rapidly since its founding in 2016.
The company now serves over 525,000 members through 24 office locations across the United States and employs around 200 people, according to LinkedIn. Their services include self-funding solutions, reference-based pricing, pharmacy benefit management, and collaboration with national and regional networks.
What Happened?
In October 2024, 90 Degree Benefits experienced a significant data breach involving unauthorized access to an employee’s email account. The breach occurred on October 18, 2024, and was discovered after the company identified suspicious activity. An investigation confirmed that certain emails and attachments were accessed by an unauthorized actor.
The review determined that sensitive information was exposed:
- Name of individual
- Medical Information
- Health Insurance Information
- Date of Birth
The breach was reported to state and federal authorities in April 2025. Specifically, disclosures were made to the Texas Attorney General on April 8, 2025, the Massachusetts Attorney General on April 18, 2025, the California Attorney General on April 19, 2025, and the U.S. Department of Health and Human Services on April 18, 2025. The company notified affected individuals by U.S. Mail and has offered complimentary credit monitoring through Experian.
Your Rights and Next Steps
If you received a notification from 90 Degree Benefits, your personal and health information may have been compromised. Even if there is no evidence of misuse at this time, it is important to take steps to protect yourself.
You have several options:
- Enroll in the complimentary credit monitoring and identity restoration services offered by 90 Degree Benefits through Experian. Instructions and an activation code should be included in your notification letter.
- Monitor your credit reports and health insurance statements for any suspicious activity.
- Consider placing a fraud alert or credit freeze with the major credit bureaus to further protect your identity.
- Report any suspected identity theft to law enforcement and your state Attorney General’s office.
Lawyers are ready to help you understand your rights and determine if you are eligible for compensation as a result of this data breach. Even if you have not experienced identity theft yet, you may still have legal options.
You May Be Entitled to Compensation
If your information was exposed in the 90 Degree Benefits data breach, you may be entitled to compensation for the risks and inconvenience you have experienced. Lawyers are investigating potential claims on behalf of affected individuals. To find out if you qualify and to join a lawsuit, complete the below form.