Data Breaches

Clover Health Investments Discloses Data Breach

Using social engineering, hackers compromised employee accounts with access to personal and health information.

Data breach

Healthcare technology company Clover Health Investments has disclosed a data breach impacting customers’ personal and health information.

Discovered on July 4, the incident was the result of a social engineering attack that compromised three non-managerial health plan employee accounts.

Clover Health Investments says it activated its response plan immediately after discovering the attack, and engaged third-party cybersecurity experts to contain and investigate the intrusion.

[ Read: New Index Tracks Material Breaches — And Refuses to Add Up the Losses ]

The compromised accounts “were assigned to employees who had member visit-scheduling and broker-facing sales functions,” the company says in a filing with the US Securities and Exchange Commission (SEC).

“The employee accounts had access to certain personally identifiable information and protected health information, but had no access to corporate financial or claims systems,” it said.

Advertisement. Scroll to continue reading.

Clover Health Investments believes that it contained the incident and evicted the attackers from its systems, but has yet to determine the precise nature, scope, and extent of the data breach.

The company has not shared details on the threat actor behind the attack, and no known ransomware or extortion group has claimed responsibility for the incident.

SecurityWeek has emailed Clover Health Investments for additional information on the data breach and will update this article if the company responds.

Founded in 2014, Clover Health Investments provides Medicare Advantage insurance plans and is a direct US government contractor.

Related: Ernst & Young Data Breach Affects Personal, Financial Information

Related: Hugging Face Hacked in Autonomous AI Attack

Related: Podcast: Broken Governance, Agentic AI, and the MindStone Agent Exclusive

Related Content

Data Breaches

Hackers exfiltrated personal, financial, and health information from the company’s Oracle EBS instance in August 2025.

Data Breaches

Longtime cybersecurity executive Richard Bird built the resource for security experts, journalists, policymakers, and everyday citizens.

Data Breaches

Hackers stole names, addresses, Social Security numbers, credit/debit card numbers, and other information from a third-party management platform.

Data Breaches

Targeting production infrastructure, the attack compromised internal datasets and service credentials.

Cybercrime

The D1R cybercrime group claimed to have stolen valuable data from Synopsys and Bosch, threatening to leak it unless a ransom is paid. 

Data Breaches

The WorldLeaks extortion group claimed to have stolen 720 GB of data from the healthcare testing and laboratory services provider.

Data Breaches

Hackers exploited a zero-day vulnerability in a third-party system to access a KDDI email system for ISPs.

Data Breaches

Hackers accessed the institution’s internal network and deleted two drives containing employee, student, and university data.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version