On September 21, 2022, Humana confirmed that the company experienced a data breach after Choice Health, one of the companies Humana uses to help sell its products, experienced a cyberattack. According to Humana, the breach resulted in some customers’ first and last names, Social Security numbers, Medicare beneficiary identification numbers, dates of birth, addresses, contact information and health insurance information being compromised. Recently, Humana sent out data breach letters to all affected parties, informing them of the incident and what they can do to protect themselves from identity theft and other frauds.

What We Know About the Humana Data Breach

The available information about the Humana / Choice Health data breach comes from the companies’ filings with various state attorneys general offices. According to these sources, on May 14, 2022, Choice Health was informed that an unauthorized party was offering data that was allegedly stolen from the Choice Health network. In response, Choice Health launched an internal investigation with the assistance of third-party cybersecurity specialists.

On May 18, 2022, this investigation confirmed that “due to a technical security configuration issue caused by a third-party service provider, a single Choice Health database was accessible through the Internet.” The company’s investigation determined that the period of unauthorized access began on or around May 7, 2022.

Upon discovering that sensitive consumer data was accessible to an unauthorized party, Choice Health then reviewed the affected files to determine what information was compromised and which consumers were impacted. While the breached information varies depending on the individual, it may include your first and last name, Social Security number, Medicare beneficiary identification number, date of birth, addresses, contact information and health insurance information.

On July 26, 2022, Choice Health sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident. However, subsequently, Choice Health learned that additional parties were affected by the breach, including Humana customers.

Humana uses the services of Choice Health to sell certain Medicare products. As a result, Choice Health has access to certain Humana customers’ sensitive information. On August 5, 2022, Choice Health notified Humana that some of the company’s customers were among those whose information was leaked. However, it was not until August 29, 2022, that Choice Health provided Humana with a list of affected individuals.

More Information About Choice Health and Humana

Choice Health Insurance is an insurance company based in Myrtle Beach, South Carolina. Choice Health is an independent broker, meaning the company offers insurance products through various providers. Some of the plans offered by Choice Health include those issued by Humana, WellCare Health Plans, Anthem BlueCross BlueShield, Mutual of Omaha, United Healthcare, Cigna and Aetna. Choice Health also offers plans through healthcare.gov. Choice Health Insurance currently employs more than 130 individuals and generates approximately $33 million in annual sales.

Founded in 1961, Humana is an insurance company and managed health care company that markets and administers health insurance coverage and related services for employers and individuals. Based in Louisville, Kentucky, Humana is the third-largest health insurance provider in the United States. The company is publicly traded on the New York Stock Exchange under the ticker symbol “HUM.” Humana employs more than 95,500 people and generates approximately $83 million in annual revenue.

If you received a “Notice of Data Breach” from Choice Health or a “Notice of Cybersecurity Incident” from Humana, your information was leaked in the recent Humana / Choice Health breach. This means that a hacker or other criminal actor may have your Social Security number and protected health information in their possession, which greatly increases the risk of falling victim to identity theft or other frauds. If you would like to learn more about protecting yourself in the wake of a data breach or what legal options you may have following the Choice Health / Humana breach, please see our recent piece on the topic here.