PCH Digital Data Breach Exposes PHI and PII of Adults and Minors - Claim Depot
Publishers Clearing House (PCH) disclosed a data breach that exposed sensitive personal and health information of adults and minors, with the incident occurring between February 4 and 18, 2026.
The breach took place on a legacy computer network, with unauthorized access occurring over a two-week period. After detecting suspicious activity, PCH Digital engaged third-party cybersecurity experts to investigate the intrusion, which was confirmed by April 2026.
The compromised files contained various types of personally identifiable information (PII), including names, contact details, Social Security numbers, financial account information, and digital signatures. Additionally, protected health information (PHI) such as health insurance details and limited medical information was exposed.
Response Measures
PCH Digital reported the breach to attorneys general in California and Vermont on November 11, 2026, and posted a notice on their website. The incident has impacted 403 residents of Rhode Island and 298 of Vermont, with written notifications mailed starting November 5, 2026.
Adults whose Social Security numbers were exposed are being offered a complimentary 12-month membership to TransUnion's credit monitoring and proactive fraud assistance services.
Protection Offered
For minors whose government identification numbers were exposed, PCH Digital is offering complimentary 12-month membership to TransUnion's cyber-monitoring services. Eligible individuals can enroll using activation codes provided in their notification letters, with enrollment required by January 28, 2027.
The company has established a dedicated phone line for affected individuals, with representatives available between 8 a.m. and 8 p.m. Eastern time, Monday through Friday. The phone number is included in each person's written notification.
Related
