Summary
- Environment: Legacy computer network
- Operational impact: Affected data migrated to a new environment
- Financial impact: No confirmed incident cost quantified
- Record status: Developing record. Reviewed November 13, 2026; updated as evidence emerges.
What happened
PCH Digital detected suspicious activity February 18, 2026. Its investigation found unauthorized network access from February 4 through February 18. [1]
Impact
Impacted files contained names, contact details and government identification numbers, such as Social Security numbers. The November 5 notification does not quantify the affected population. [1]
Timeline
Unauthorized access begins
The investigation established the start of the access interval.
[1]Suspicious activity detected
PCH Digital began investigation and remediation.
[1]Notification letter issued
The company offered twelve months of credit monitoring.
[1]Briefing updated
This briefing was last reviewed and updated on November 13, 2026.
Threat Group & Attack Vector
The notice does not identify the entry method, attacker or proof of data exfiltration.
Actors
- No threat actor group has been identified in the reviewed public evidence.
TTPs
- No specific ATT&CK technique is mapped from the available evidence.
Response
PCH Digital migrated data to a more secure environment and used outside investigators. File-review results arrived in September, followed by contact verification. It notified law enforcement and said that did not delay notification. [1]