INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Paylogix Ransomware Incident Affects 41K Individuals Worldwide

| 2026-10-27 16:53 CRITICAL HIGH RANSOMWARE & EXTORTION DATA BREACH
JSON
Executive Summary
AI-generated
On October 27, 2026, a ransomware incident was reported at Paylogix, affecting approximately 41,739 individuals. The attack is believed to be attributed to the Akira ransomware group, which claimed to have exfiltrated 185 GB of data. This cyber operation targeted the healthcare sector and involved unauthorized access to computer networks from November 13, 2025, to November 18, 2025. Additionally, two other organizations were also affected: the Kenaitze Indian Tribe in Alaska with approximately 9,319 individuals exposed, and the Center for Bone and Joint Surgery of the Palm Beaches in Florida with around 5,461 individuals compromised. The forensic investigation revealed that files containing personal and protected health information were accessed and copied from these networks during the attack period.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope healthhealth financefinance
Incident Timeline
‎November 13, 2025
An unauthorized third party gained access to Paylogix's computer network from November 13, 2025, to November 18, 2025.
industry Health
General Document Context
industry Finance
General Document Context
‎November 18, 2025
The Kenaitze Indian Tribe in Alaska experienced a ransomware attack by the Akira ransomware group, resulting in the exfiltration of 185 GB of data containing dates of birth, Social Security numbers, and voluntary benefit information.
industry Health
General Document Context
industry Finance
General Document Context
data_breach 185 GB
While not mentioned in the notification letters, this appears to have been a ransomware attack by the Akira ransomware group, which claimed to have exfiltrated 185 GB of data.
organisation Cybersecurity Consultation
Avail of a Free 30-Minute Cybersecurity Consultation with Blue Team Alpha Review your security program, get advice on a specific cybersecurity concern, identify risk-reduction priorities, or take the first step toward your annual HIPAA Security Risk Assessment.
organisation Blue Team Alpha Review
Avail of a Free 30-Minute Cybersecurity Consultation with Blue Team Alpha Review your security program, get advice on a specific cybersecurity concern, identify risk-reduction priorities, or take the first step toward your annual HIPAA Security Risk Assessment.
organisation Social Security
Paylogix determined that the exposed data included dates of birth, Social Security numbers, and voluntary benefit information.
‎May 4, 2026
General Document Context The unauthorized access was identified on or around May 4, 2026.
industry Health
General Document Context
industry Finance
General Document Context
‎July 6, 2026
Threat actors used ransomware to target a Paylogix account containing the personal and protected health information of 1,273 individuals.
industry Health
General Document Context
industry Finance
General Document Context
‎July 16, 2026
General Document Context.
industry Health
General Document Context
industry Finance
General Document Context
‎between July 16, 2026
An unauthorized third party accessed Paylogix's network between July 16, and July 27, 2026.
‎July 27, 2026
Threat actors used ransomware to target Paylogix's website on July 27, 2026.
industry Health
General Document Context
industry Finance
General Document Context
‎September 25, 2026
Threat actors used ransomware to target the protected health information of 5,461 individuals at Center for Bone and Joint Surgery of the Palm Beaches in Florida.
industry Health
General Document Context
industry Finance
General Document Context
organisation Center for Bone
Center for Bone and Joint Surgery of the Palm Beaches, Florida Center for Bone and Joint Surgery of the Palm Beaches in Florida has notified the HHS’ Office for Civil Rights about a breach of the protected health information of 5,461 individuals.
organisation the Palm Beaches
Center for Bone and Joint Surgery of the Palm Beaches, Florida Center for Bone and Joint Surgery of the Palm Beaches in Florida has notified the HHS’ Office for Civil Rights about a breach of the protected health information of 5,461 individuals.
organisation HHS’ Office for Civil Rights
Center for Bone and Joint Surgery of the Palm Beaches, Florida Center for Bone and Joint Surgery of the Palm Beaches in Florida has notified the HHS’ Office for Civil Rights about a breach of the protected health information of 5,461 individuals.
‎Oct 27, 2026
Paylogix LLC notified the HHS Office for Civil Rights (OCR) about a breach of protected health information affecting 41,739 individuals.
industry Health
General Document Context
industry Finance
General Document Context
tactic Ransomware
Ransomware Incident at Paylogix Affects 41K Individuals Posted By Steve Alder on Oct 27, 2026 Data breaches have been announced by Paylogix, the Kenaitze Indian Tribe, the Center for Bone and Joint Surgery of the Palm Beaches, and Wichita Family Dental.
general_metric 41 Individuals
Ransomware Incident at Paylogix Affects 41K Individuals Posted By Steve Alder on Oct 27, 2026 Data breaches have been announced by Paylogix, the Kenaitze Indian Tribe, the Center for Bone and Joint Surgery of the Palm Beaches, and Wichita Family Dental.
organisation K Individuals Posted
Ransomware Incident at Paylogix Affects 41K Individuals Posted By Steve Alder on Oct 27, 2026 Data breaches have been announced by Paylogix, the Kenaitze Indian Tribe, the Center for Bone and Joint Surgery of the Palm Beaches, and Wichita Family Dental.
organisation Paylogix
Ransomware Incident at Paylogix Affects 41K Individuals Posted By Steve Alder on Oct 27, 2026 Data breaches have been announced by Paylogix, the Kenaitze Indian Tribe, the Center for Bone and Joint Surgery of the Palm Beaches, and Wichita Family Dental.
organisation the Center for Bone and
Ransomware Incident at Paylogix Affects 41K Individuals Posted By Steve Alder on Oct 27, 2026 Data breaches have been announced by Paylogix, the Kenaitze Indian Tribe, the Center for Bone and Joint Surgery of the Palm Beaches, and Wichita Family Dental.
organisation Paylogix LLC
Paylogix, New York Paylogix LLC, a New York-based third-party administrator and software-as-a-service provider, whose solutions are used for enrollment, billing, and managing voluntary employee benefits, has notified the HHS Office for Civil Rights (OCR) about a breach of the protected health information of 41,739 individuals.
organisation the HHS Office for Civil Rights
Paylogix, New York Paylogix LLC, a New York-based third-party administrator and software-as-a-service provider, whose solutions are used for enrollment, billing, and managing voluntary employee benefits, has notified the HHS Office for Civil Rights (OCR) about a breach of the protected health information of 41,739 individuals.
organisation OCR
Paylogix, New York Paylogix LLC, a New York-based third-party administrator and software-as-a-service provider, whose solutions are used for enrollment, billing, and managing voluntary employee benefits, has notified the HHS Office for Civil Rights (OCR) about a breach of the protected health information of 41,739 individuals.
‎2026/10/27
Ransomware Incident at Paylogix Affects 41K Individuals.
organisation Ransomware Incident
Ransomware Incident at Paylogix Affects 41K Individuals.
organisation Paylogix Affects
Ransomware Incident at Paylogix Affects 41K Individuals.
Tactical Metrics
Metrics
data_breach
185
Gb
While not mentioned in the notification letters, this appears to have been a ransomware attack by the Akira ransomware group, which claimed to have exfiltrated 185 GB of data.
Intelligence Sources
HIPAA Journal 2026-10-27