---
title: "PCH Digital legacy-network intrusion"
description: "PCH Digital reported a February 2026 legacy-network intrusion involving files containing personal information."
incident_type: "Cybersecurity incident"
status: "active"
last_modified: "2026-11-13"
canonical_url: "https://www.ally.security/incidents/pch-digital-legacy-network-intrusion-2026"
markdown_url: "https://www.ally.security/incidents/pch-digital-legacy-network-intrusion-2026.md"
stix_url: "https://www.ally.security/incidents/pch-digital-legacy-network-intrusion-2026/stix.json"
---

# PCH Digital legacy-network intrusion

PCH Digital reported a February 2026 legacy-network intrusion involving files containing personal information.

Last modified Nov 13, 2026 · 1 source

## Summary

- **Environment:** Legacy computer network
- **Operational impact:** Affected data migrated to a new environment
- **Financial impact:** No confirmed incident cost quantified

## What happened

[PCH Digital](https://www.pch.com/) detected suspicious activity February 18, 2026. Its investigation found unauthorized network access from February 4 through February 18. [1](#source-1)

## Impact

Impacted files contained names, contact details and government identification numbers, such as Social Security numbers. The [November 5 notification](https://oag.ca.gov/system/files/PCH%20-%20Notice%20Templates.pdf) does not quantify the affected population. [1](#source-1)

## Timeline

### February 4, 2026 — Unauthorized access begins

The investigation established the start of the access interval. [1](#source-1)

### February 18, 2026 — Suspicious activity detected

PCH Digital began investigation and remediation. [1](#source-1)

### November 5, 2026 — Notification letter issued

The company offered twelve months of credit monitoring. [1](#source-1)

### November 13, 2026 — Briefing updated

This briefing was last reviewed and updated on November 13, 2026.

## Threat Group & Attack Vector

The notice does not identify the entry method, attacker or proof of data exfiltration.

### Actors

- No threat actor group has been identified in the reviewed public evidence.

### TTPs

- No specific ATT\&CK technique is mapped from the available evidence.

## Response

PCH Digital migrated data to a more secure environment and used outside investigators. File-review results arrived in September, followed by contact verification. It notified law enforcement and said that did not delay notification. [1](#source-1)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/pch-digital-legacy-network-intrusion-2026/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### PCH Digital data-breach notification sample

official · PCH Digital, LLC · Nov 5, 2026

<https://oag.ca.gov/system/files/PCH%20-%20Notice%20Templates.pdf>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Occurred At · 100% confidence · current**  
   Notification letter issued: 2026-11-05
2. **Resulted In · 100% confidence · current**  
   PCH Digital legacy-network intrusion: Suspicious activity detected
3. **Affected Organization · 100% confidence · current**  
   PCH Digital legacy-network intrusion: PCH Digital, LLC
4. **Disclosed At · 100% confidence · current**  
   PCH Digital legacy-network intrusion: 2026-11-05
5. **Resulted In · 100% confidence · current**  
   PCH Digital legacy-network intrusion: The company notified law enforcement, which did not delay the notice, and offered twelve months of credit monitoring and fraud assistance.
6. **Occurred At · 100% confidence · current**  
   Suspicious activity detected: 2026-02-18
7. **Resulted In · 100% confidence · current**  
   PCH Digital legacy-network intrusion: Notification letter issued
8. **Resulted In · 100% confidence · current**  
   PCH Digital legacy-network intrusion: PCH Digital migrated data to a new environment with stronger safeguards, used outside investigators and received file-review results in September before verifying notification addresses.
9. **Resulted In · 100% confidence · current**  
   PCH Digital legacy-network intrusion: PCH Digital detected suspicious activity in a legacy network February 18. Its April investigation found unauthorized network access from February 4–18.
10. **Resulted In · 100% confidence · current**  
   PCH Digital legacy-network intrusion: Unauthorized access interval begins
11. **Resulted In · 100% confidence · current**  
   PCH Digital legacy-network intrusion: Impacted files contained names, contact information and government identification numbers such as Social Security numbers. No overall affected-person count appears in the notice.
12. **Ended At · 100% confidence · current**  
   PCH Digital legacy-network intrusion: 2026-02-18
13. **Occurred At · 100% confidence · current**  
   Unauthorized access interval begins: 2026-02-04
14. **Discovered At · 100% confidence · current**  
   PCH Digital legacy-network intrusion: 2026-02-18
15. **Began At · 100% confidence · current**  
   PCH Digital legacy-network intrusion: 2026-02-04

</details>