Actor alleges leak of data on 891,110 people from Personify Health
An underground forum post alleges a leak of full names, email addresses, phone numbers and physical addresses of about 891,110 people from Personify Health, a US health and wellbeing technology company serving employers and health plans. The post attributes the breach to a group called Helix Group on October 17, 2026 and says the data was published after the company refused a ransom; Personify Health has not confirmed an incident. Affected people should watch for benefits and claims phishing that names the real provider.
What happened
An underground forum post alleges a leak of data on about 891,110 people from Personify Health, a US health and wellbeing technology company serving employers and health plans. The post attributes the breach to a group called Helix Group on October 17, 2026 and says the data was published after the company refused a ransom. Personify Health has not confirmed an incident.
Why it matters
If confirmed, it exposes full names, emails, phone numbers and addresses of health plan members. These people become targets of benefits fraud and phishing, because the attacker can name the real wellbeing provider. For the company, there is reputational and regulatory notification risk.
What to do
Monitor Personify Health official channels for confirmation and guidance. Tell employees and plan members to distrust contacts that use real personal details. Review the breach response plan and communication with affected people.
For the technical team
- Affected
- Personify Health, empresa americana de tecnologia de saúde e bem-estar que atende empregadores e operadoras de planos; b · Personify Health (alleged): contact data on about 891,110 people, including full names, email addresses, phone numbers and physical addresses.
- Exploitation
- Threat actor claim, unconfirmed. An underground forum post reported by DailyDarkWeb attributes the leak to a group called Helix Group on October 17, 2026 and says data was published after the company refused a ransom. The group is not a well established extortion brand and Personify Health has not confirmed an incident.
- Fix
- Not applicable: alleged data leak, no software fix.
- More details
- The data is being shared on the forum for credits rather than sold. DailyDarkWeb analyst note: health plan members whose contact details leak are prime targets for benefits and claims phishing, since attackers can name the real wellbeing provider.
Timeline
Incident opened.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
