Medicare Advantage insurer Clover Health has disclosed a data breach after a hacker gained access to three employee accounts through social engineering, potentially exposing members’ personal and protected health information.
The company discovered the breach on July 4 and disclosed it in a securities filing on Friday. The compromised employees worked in member visit scheduling and broker relations, and had access to personally identifiable information and protected health information but not corporate financial or claims systems.
Clover has nearly 156,000 members across five states. The company said it has taken steps to contain the breach, notified law enforcement, and is still investigating what specific data may have been accessed or stolen. It did not disclose how many individuals may be affected.
Healthcare data breaches have surged over the past decade as attackers exploit outdated IT systems and limited cybersecurity resources. Phishing and social engineering remain the most common attack vectors. Clover said it expects the incident to have no material impact on its operations or finances.
The Tennessee-based insurer was founded in 2014 and went public in 2021. It offers Medicare Advantage plans and a clinical decision support platform called Clover Assistant.
