Phreesia, Inc. data breach

Clerk's notes

Phreesia, Inc. has officially informed the Texas Attorney General about a data security incident, with the filing reported on February 6, 2026. The company, which provides technology solutions to healthcare practices, stated that unauthorized access to its systems occurred on or about August 17, 2025.

Given Phreesia's role in handling sensitive patient intake and management information for medical practices, the incident raises concerns about the potential exposure of personal information. While the specific types of data accessed have not been detailed in public filings, the company has confirmed that unauthorized parties gained access to its environment.

Individuals who received a formal notification letter from Phreesia regarding this incident should carefully review its contents. These letters typically provide crucial details about the breach, including any specific information that may have been compromised, though broad terms like ‘personal information’ are often used when specifics are unavailable.

For those affected, it is advisable to remain vigilant against potential misuse of your data. This includes monitoring any unexpected communications or attempts to gather personal details. Take time to understand the guidance provided in your notification letter and consider implementing any recommended protective measures.

As the investigation into this incident is ongoing, affected individuals may wish to seek a free case review to explore their legal options and understand the potential impact of this data exposure. This is attorney advertising, and past results do not guarantee future outcomes.

If a notification letter about this breach reached you, see every Texas data breach on file or browse all cases.