PCH Digital, LLC, which news reports identify as the current operator of Publishers Clearing House, is notifying people that their names, contact information and Social Security or other government identification numbers were in files an unauthorized party accessed between February 4 and 18, 2026. It is offering 12 months of free TransUnion monitoring; no lawsuit over the breach had been identified as of November 15, 2026, and there is nothing to claim.
Breach Notice · No Lawsuit Confirmed · Nothing to Claim
This page reports a data breach notice. PCH Digital has not been found liable for anything, OCA has not identified a lawsuit over the breach, no class has been certified, and there is nothing to claim. This page is informational and is not legal advice.
What Is This About?
PCH Digital, LLC is notifying people that their personal information, including Social Security or other government identification numbers, was in files an unauthorized third party accessed earlier this year. News reports describe PCH Digital as the company that now operates the Publishers Clearing House sweepstakes business, whose assets were sold after a 2025 bankruptcy. A sample of the notice, dated November 5, 2026, was filed with the California Attorney General on November 11, 2026.According to the notice, PCH Digital detected suspicious activity in “a portion of a legacy computer network” on February 18, 2026 and began working with cybersecurity experts. In April, the investigation found that an unauthorized third party had access to that part of the network from February 4 to 18, 2026. PCH Digital identified the affected files, moved data to a new environment with added safeguards and hired a data-review firm to analyze what the files contained. It received those results in September and then worked to confirm contact information before mailing letters. PCH Digital has not said how many people were notified.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What Information Was Involved?
The notice says the affected files contained the recipient’s name, contact information and government identification number, “such as a Social Security number.” A Social Security number paired with a name and contact details is the core of what is needed to open new credit in someone’s name, which is why breaches involving it usually come with a credit monitoring offer.The notice does not mention payment card or bank account information, and it does not say whether the people notified were sweepstakes entrants, customers, prize winners, employees or others.
What PCH Digital Is Offering
PCH Digital is offering a free 12-month membership to TransUnion’s credit monitoring and proactive fraud assistance. Enrollment is on TransUnion’s myTrueIdentity website with the activation code in the letter, and the code stops working after January 28, 2027. TransUnion may ask enrollees to verify personal information.The letter also describes two free tools available under federal law: a fraud alert, which tells lenders to take extra steps to verify identity and lasts one year, and a security freeze, which blocks access to a person’s credit report until it is lifted. Both can be placed through the three national credit bureaus at no cost, and the Federal Trade Commission’s IdentityTheft.gov site explains how.
Has a Lawsuit Been Filed?
As of November 15, 2026, OCA had not identified a class action over the PCH Digital breach, though at least one law firm has announced it is looking into it. Breaches that expose Social Security numbers often lead to proposed class actions, and the gap between the February intrusion and the November letters is the kind of timeline such suits commonly challenge. Any such claims would be allegations.OCA will update this page if a complaint is filed or if PCH Digital reports how many people were affected.
Questions
What information was exposed in the PCH Digital data breach?
According to the notice, the affected files contained people’s names, contact information and a government identification number, such as a Social Security number. The notice does not list financial account or payment card information.
When did the PCH data breach happen?
PCH Digital says it detected suspicious activity on a legacy portion of its network on February 18, 2026. Its investigation found in April that an unauthorized third party had access from February 4 to 18, 2026. A data-review firm’s results came back in September, and notice letters are dated November 5, 2026.
Why did PCH take until November to send notices?
The notice says PCH Digital identified the affected files after the April investigation, hired a data-review firm to analyze their contents, received the results in September and then worked to confirm contact information before notifying people. It also says law enforcement did not delay the notice. Whether that timeline was reasonable is a question a lawsuit could raise, but none had been identified as of November 15, 2026.
How do I enroll in PCH’s free credit monitoring?
PCH Digital is offering a 12-month TransUnion credit monitoring and fraud assistance membership. Enrollment is on TransUnion’s myTrueIdentity website with the activation code in the letter, and the code stops working after January 28, 2027.
Is this related to the Publishers Clearing House FTC refunds?
No. The Federal Trade Commission’s refunds to Publishers Clearing House customers came from a separate case over the company’s sweepstakes entry practices. This page concerns a February 2026 network breach. There is no settlement, fund or claim form for the breach.
Sources
• California Attorney General — PCH Digital, LLC breach report and sample notice• Federal Trade Commission — IdentityTheft.gov
