Paylogix breach exposed personal and policy data after network intrusion

Paylogix, a technology provider for voluntary benefits administration, disclosed a cyber incident that disrupted its network and led to unauthorized access to certain systems between November 13 and November 18, 2025. After containment and restoration efforts, the company said its investigation found that files on the network may have been viewed or taken, exposing sensitive information tied to customer records.

The compromised data may include names, addresses, email addresses, policy numbers, and Social Security numbers. Paylogix said it completed a review of affected files, notified relevant customers around July 20, 2026, and issued individual notices dated August 14, 2026; one state filing said about 634 Rhode Island residents may have been affected. The company reported the incident to law enforcement, implemented additional technical security measures, and is offering 12 months of credit monitoring and identity theft protection through Cyberscout, a TransUnion company.