Premise Health is notifying people that a since-fired employee misappropriated company data starting around March 26, 2026, including names, Social Security numbers, health insurance information and diagnostic or treatment information. It is offering free Experian monitoring with enrollment by February 26, 2027; no lawsuit over the breach had been identified as of November 15, 2026, and there is nothing to claim.
Breach Notice · No Lawsuit Confirmed · Nothing to Claim
This page reports a data breach notice. Premise Health has not been found liable for anything, OCA has not identified a lawsuit over the breach, no class has been certified, and there is nothing to claim. This page is informational and is not legal advice.
What Is This About?
Premise Health Holding Corp. is notifying people that one of its own employees took their personal and health information. Letters are dated November 6, 2026, and a sample was filed with the California Attorney General.According to the notice, Premise Health discovered on September 18, 2026 that an employee had violated company information security policies and misappropriated company data beginning on or about March 26, 2026. It revoked the employee’s access, validated its security controls and investigated, receiving a preliminary analysis of the data on October 14, 2026. The employee has been fired and the incident reported to law enforcement. Premise Health says it is not aware of any misuse of the information and has not published how many people were notified.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What Information Was Involved?
The notice says the information included, in part or whole, the person’s name, address, date of birth, a government identification number such as a Social Security number, health insurance information, diagnostic or other treatment information, and other information provided in connection with eligibility for services or the person’s relationship with Premise Health.Some letters went to parents on behalf of minor dependents, and the monitoring offer includes a separate enrollment path for children.
An Insider, Not an Outside Hacker
Most breach notices describe an outside attacker. This one describes an employee who took data, starting about six months before the company says it found out. The notice does not say what the employee did with the data, how it was discovered or why the activity went undetected from March to September. Some law firm announcements about the incident describe outside “cybercriminals,” which does not match Premise Health’s own account.What Premise Health Is Offering
Premise Health is offering a complimentary Experian IdentityWorks membership, with the length stated in each letter, plus Experian identity restoration help that does not require enrollment. Adults and minors enroll through separate Experian pages with the activation code in the letter, and codes stop working after 11:59 p.m. UTC on February 26, 2027.Federal law also gives anyone notified of a breach free fraud alerts and security freezes through the three national credit bureaus; the Federal Trade Commission’s IdentityTheft.gov site explains how they work.
Has a Lawsuit Been Filed?
As of November 15, 2026, OCA had not identified a filed class action over the Premise Health breach, though several law firms have announced they are looking into it. Insider-theft cases raise different questions from hacking cases, including what access controls and monitoring the company had in place. Any such claims would be allegations. OCA will update this page if a complaint is filed or Premise Health reports how many people were affected.Questions
What happened in the Premise Health data breach?
Premise Health says it discovered on September 18, 2026 that an employee had violated its information security policies and misappropriated company data beginning on or about March 26, 2026. The company revoked the employee’s access, investigated, fired the employee and reported the incident to law enforcement. Notice letters are dated November 6, 2026.
What information did the Premise Health employee take?
According to the notice, the information included, in part or whole, name, address, date of birth, Social Security number or other government ID number, health insurance information, diagnostic or other treatment information, and other information connected to eligibility for services with Premise Health.
How do I enroll in Premise Health’s free Experian monitoring?
The letter includes an activation code for Experian IdentityWorks, with separate enrollment pages for adults and for minors. Codes stop working after 11:59 p.m. UTC on February 26, 2027. Experian identity restoration help is available without enrolling for the period stated in the letter.
How many people were affected by the Premise Health breach?
Premise Health has not published a total. The sample notice was filed with the California Attorney General, which receives notices when more than 500 California residents are affected.
Is there a Premise Health data breach class action?
OCA had not identified a filed class action as of November 15, 2026. Several law firms have announced investigations, which are not lawsuits. There is no settlement, fund or claim form.
Sources
• California Attorney General — Premise Health Holding Corp. breach report and sample notice• Federal Trade Commission — IdentityTheft.gov
