Data Breach · Lawsuit Filed

Paylogix Sued Over Data Breach That Exposed Social Security Numbers and Was Disclosed Nine Months Later

Published October 11, 2026

People who received a Paylogix data breach notice in August 2026 may be covered by proposed class actions alleging Paylogix, LLC failed to protect Social Security numbers and other information copied from its network in November 2025, then took about nine months to notify them. No class has been certified and there is nothing to file yet.

Data breach illustration for the Paylogix data breach lawsuit
▼ Allegations Only · No Settlement Yet

This article describes class action complaints. The statements about Paylogix’s security practices are unproven allegations. Paylogix, LLC has not been found liable, there is no certified class, and nothing to claim at this time. This page is informational and is not legal advice.

What Is This About?

Paylogix, LLC, a Westbury, New York company that handles billing and payroll deductions for voluntary employee benefits, says someone accessed its network and copied files between November 13 and November 18, 2025. It began sending notice letters to affected people around August 14, 2026, according to a lawsuit that quotes the notice.

Within weeks, proposed class actions were filed against Paylogix in the U.S. District Court for the Eastern District of New York. One of them, Miller v. Paylogix, LLC, No. 2:26-cv-05416, filed September 1, 2026, alleges Paylogix failed to secure the information it held and did not notify people in time. Paylogix has not responded, and none of the allegations has been tested in court.

Status Lawsuits Filed E.D.N.Y. · first cases filed August 31 and September 1, 2026 · no class certified
What Was Exposed Names, addresses, policy numbers, emails, Social Security numbers Files copied November 13–18, 2025 · notices mailed August 2026
Who It Covers (Proposed) Everyone in the U.S. whose information was taken in the breach
Can I Claim? No — nothing to claim yet

Why Paylogix Had This Information

Paylogix is a third-party administrator and insurance technology company. It works for insurance carriers, benefits providers, brokers and employers, handling enrollment, premium billing and payment, payroll-deduction administration and payment reconciliation for voluntary benefits such as supplemental insurance. That means it holds information about employees whose benefits run through its systems, many of whom may never have dealt with Paylogix directly. The named plaintiff in the Miller case, a Washington state resident, says her information reached Paylogix through those benefits services and that she learned of the breach from the notice letter.

What Paylogix’s Notice Says

According to the sample notice letter quoted in the Miller complaint, Paylogix experienced a network disruption, took steps to contain it and restore its systems, and found through an investigation that certain systems had been accessed and files copied between November 13 and November 18, 2025. At the time of that notice, Paylogix said its review of the files to determine what information was involved, and whose, was still ongoing.

The complaint says the information involved includes names, addresses, insurance policy numbers, email addresses and Social Security numbers. It does not give a total number of people affected.

What the Lawsuits Allege

The Miller complaint alleges Paylogix did not use reasonable security to protect the information, and that the roughly nine months between the intrusion and the notice letters left people unable to protect themselves against identity theft in the meantime. It brings claims for negligence, breach of implied contract and unjust enrichment, and asks for a declaratory judgment.

The proposed class is everyone in the United States whose personal information was accessed or acquired in the breach. The complaint seeks damages and court orders requiring Paylogix to improve its data security.

Other Paylogix Cases

CourtListener shows several proposed class actions over the same breach in the Eastern District of New York, including McCoy v. Paylogix, LLC, No. 2:26-cv-05383, filed August 31, 2026, and Slodov v. Paylogix, LLC, No. 2:26-cv-05544, filed September 8, 2026. The Miller docket notes related cases, and the case was reassigned to U.S. District Judge Nusrat J. Choudhury on September 14, 2026.

What Happens Next?

Paylogix was served in September and will have a chance to respond. A class has not been certified, and there is no settlement or claim form. OCA’s data breach hub tracks which breach cases have open claims.

Questions

What is Paylogix and why did it have my information?

Paylogix, LLC is a third-party administrator and insurance technology company based in Westbury, New York. It handles enrollment, premium billing and payroll deductions for voluntary employee benefits on behalf of insurers, brokers and employers, so it holds information about workers whose benefits run through its systems, even if they never dealt with Paylogix directly.

What information was exposed in the Paylogix data breach?

According to Paylogix’s notice as quoted in the lawsuit, files were copied from its network between November 13 and 18, 2025, and the information involved includes names, addresses, policy numbers, email addresses and Social Security numbers.

Who is covered by the Paylogix data breach lawsuit?

The complaint in Miller v. Paylogix proposes a nationwide class of everyone in the United States whose personal information was accessed or acquired in the breach. No class has been certified.

Is there a Paylogix data breach settlement?

No. The lawsuits were filed in late August and September 2026 and there is no settlement, certified class or claim form. If the cases settle, people who received a breach notice would typically be told how to file a claim.

Sources

• Class Action Complaint — Miller v. Paylogix, LLC, U.S. District Court for the Eastern District of New York, Case No. 2:26-cv-05416 (filed September 1, 2026), via CourtListener: Complaint (PDF)
• Docket for Miller v. Paylogix, LLC, No. 2:26-cv-05416 (E.D.N.Y.), via CourtListener: CourtListener Docket

For more class actions keep scrolling below.
Status Lawsuits Filed
Case Title Miller v. Paylogix, LLC
Case Number 2:26-cv-05416
Court U.S. District Court, Eastern District of New York
Date Filed September 1, 2026
Breach Window November 13–18, 2025
Court Docket CourtListener Docket

Related Data Breach Lawsuits