Did PHREESIA, INC. have a data breach?

Answer

Yes. PHREESIA, INC. reported a data breach to the Illinois Attorney General on August 25, 2025.

What the filing says

Reported to: Illinois Attorney General
Filing date: August 25, 2025
Breach date: Not stated in the filing
People affected: Not stated in the filing

In plain terms

Phreesia, Inc. is a prominent healthcare technology company that provides digital patient intake and management solutions for medical practices and health systems. Given the nature of their services, the company typically collects and stores sensitive protected health information, including clinical data, insurance details, and personal identifiers necessary for patient registration and billing. In 2025, Phreesia, Inc. officially reported a data security incident to the Illinois Attorney General, confirming that unauthorized access to their systems occurred. If you have received a formal data breach notification letter, it indicates that your personal or health-related information was involved in this incident. This notice is intended to inform you of the event and provide guidance on the steps you should take to protect your identity and medical privacy.

Other filings by PHREESIA, INC.

Companies often file the same breach in several states. Each filing is listed separately.

Commonly recommended next steps

Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Look up another company

Other breaches reported in Illinois

DataBreachSearch.com reports what was filed with state regulators. It is not legal advice, is not a law firm, and is not affiliated with any government agency or with PHREESIA, INC..