The 2025 Perseus House data breach was a cyber incident in which an unauthorized actor accessed certain systems and copied files. According to the official notice, files were copied on or around November 29, 2025, and the event may affect certain current and former residents, employees, and other individuals.
The U.S. Department of Health and Human Services Office for Civil Rights recorded the event as a hacking/information-technology incident involving a network server and reported 969 affected individuals.
Verified Incident TimelinePerseus House began an investigation after identifying suspicious activity. The investigation determined that an unauthorized actor accessed certain systems and copied files on or around November 29, 2025. The organization's public notice is dated January 21, 2026, and the HHS record is dated February 20, 2026.
What Information May Have Been Affected?The affected information may vary by person. The official notice lists dates of birth, Social Security numbers, financial-account information such as personal banking numbers, medical information that may include diagnoses, treatments, and providers, health-insurance group or policy numbers, home addresses, and telephone numbers.
How the Organization RespondedPerseus House says it secured its systems, maintained continuity of services, and began a comprehensive review to identify the information and people involved. The event was reported to federal law enforcement, and the organization says it continues to evaluate and enhance its technical safeguards.
What Should Affected People Do?Notice recipients should regularly review bank-account activity, credit reports, and health-insurance explanation-of-benefits statements for an unfamiliar transaction or service. People whose Social Security numbers or financial-account information were affected may consider a free fraud alert or credit freeze based on their circumstances and report suspicious activity to the relevant institution.