Paylogix Says Hackers Stole Financial and Health Data in Cyberattack

Summary

Paylogix says hackers stole files from its network between November 13 and 18, affecting people’s financial, health and other sensitive information. The company reported 64,383 affected people in South Carolina, plus people in New Hampshire and Vermont.

Key points

Paylogix said a cyberattack in the fall disrupted its systems; an investigation found files were stolen between November 13 and 18.
The stolen information included Social Security numbers, financial account and health insurance information, medical data, passport numbers, taxpayer IDs and electronic signatures.
Paylogix reported 64,383 affected people in South Carolina, 2,304 in New Hampshire and 1,102 in Vermont; the total number affected is unknown.
The company was added to the Akira ransomware gang’s leak site in January, but Paylogix did not identify the hackers.
Paylogix notified federal law enforcement and said it is cooperating with an investigation.

Article Details

Victim Organization: Paylogix
Incident Type: Cyberattack involving theft of files from the company’s network
Data Types Exposed: Social Security numbers
Electronic signatures
Financial account information
Health insurance information
Medical data
Passport numbers
Taxpayer IDs
Affected Records: At least 67,789 people were reported affected in South Carolina, New Hampshire, and Vermont; the total number of affected people is unknown.
Operational Impact: The attack disrupted Paylogix’s systems. The article does not describe the duration or extent of the disruption.
Ransom Or Extortion: Paylogix was added to the Akira ransomware gang’s leak site in January. The article does not confirm that Akira carried out the attack or that a ransom was demanded or paid.
Claim Status: confirmed

Threat Actors

AkiraThe article identifies Akira as a ransomware gang and reports that Paylogix was added to its leak site; Paylogix did not identify the hackers, so responsibility for this incident is not confirmed.

Malware

Akiraand November 18. Paylogix did not identify the hackers, but the company was added to the leak site of the Akira ransomware gang in January.

Industries

Employee benefitsPaylogix is a third-party administrator that helps companies manage employee benefits, payroll and insurance administration. It serves as a clearinghouse for many of the tasks handled by company administrators,InsuranceHackers stole troves of sensitive information on tens of thousands of people from Paylogix, a tech company that provides benefits management tools to employers and insurance firms.