On or about October 16, 2025, PeopleGuru Holdings, Inc., (“PeopleGuru”) reported a significant cybersecurity incident (the “Data Breach”) to the California Attorney General’s Office. The Data Breach occurred when an unauthorized actor gained access to PeopleGuru’s computer systems between July 6, 2025 and July 9, 2025. PeopleGuru engaged third-party cybersecurity specialists to determine the nature and scope of the incident and notified federal law enforcement.
PeopleGuru Holdings, Inc. is a software company that provides payroll and HR solutions for businesses across the United States.
PeopleGuru sent data breach notification letters to those affected and offered complimentary credit monitoring and identity restoration services through TransUnion. If you received a Data Breach notification letter from PeopleGuru, it confirms that your information was potentially impacted.
What information is involved in the PeopleGuru Holdings, Inc. Data Breach?
Compromised information may include:
Name
Social Security Number
Driver’s License
Financial Account Information
Date of Birth
Passport Number
Health Insurance Policy or ID Number
Medical Information
Your Personally Identifiable Information (PII) includes details that can be used to identify you. It plays a key role in defining your identity. Organizations are legally obligated to safeguard this data, and failure to do so can result in statutory fines and other legal consequences. If PII is stolen, it may be exploited by criminals to commit identity fraud.
A specific category of PII is Protected Health Information (PHI), which pertains to personal medical data. PHI is safeguarded under both federal and state regulations. Entities such as healthcare providers and businesses that manage PHI must ensure its security. Just like PII, compromised PHI can be misused by identity thieves, and it’s common for cybercriminals to use both types of information together.
If your data has been exposed in a breach, one of the most effective steps you can take is to enroll in credit and identity monitoring services promptly.
California offers extra protections and legal rights to its residents through the California Consumer Privacy Act (“CCPA”).
If you received a NOTICE OF DATA BREACH letter from PeopleGuru Holdings, Inc., your personal, financial, and/or medical information may be at risk. This type of data can be exploited by identity thieves to commit fraud and other crimes.