Humana Inc.

Humana, Inc. experienced a data breach on May 7, 2022, due to unauthorized access to its systems. The incident exposed sensitive personal information of 639 Washington State residents, including names, Social Security numbers, and health insurance details. The breach was formally reported to the Washington State Office of the Attorney General on September 8, 2022, indicating a delayed discovery or disclosure. The compromised data poses significant risks, such as identity theft, financial fraud, and potential misuse of health-related information. While the exact method of unauthorized access was not specified, the exposure of Social Security numbers a high-value target for cybercriminals heightens the severity. The breach underscores vulnerabilities in Humana’s data protection measures, raising concerns about compliance with regulatory standards like HIPAA and the potential for long-term reputational damage.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=13823

TPRM report: https://www.rankiteo.com/company/humana

"id": "hum033091825",
"linkid": "humana",
"type": "Breach",
"date": "5/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 639,
                        'industry': 'Healthcare',
                        'location': 'United States (Washington State residents '
                                    'affected)',
                        'name': 'Humana, Inc.',
                        'type': 'Health Insurance Provider'}],
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': 639,
                 'personally_identifiable_information': ['names',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Identifiable '
                                              'Information (PII)',
                                              'Protected Health Information '
                                              '(PHI)']},
 'date_detected': '2022-05-07',
 'date_publicly_disclosed': '2022-09-08',
 'description': 'The Washington State Office of the Attorney General reported '
                'that Humana, Inc. experienced a data breach due to '
                'unauthorized access on May 7, 2022. Approximately 639 '
                'residents were affected, and the compromised data included '
                'personal information such as names, Social Security numbers, '
                'and health insurance information.',
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 'health insurance information'],
            'identity_theft_risk': 'High (PII exposed)'},
 'references': [{'date_accessed': '2022-09-08',
                 'source': 'Washington State Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Washington State '
                                                       'Office of the Attorney '
                                                       'General'},
 'response': {'communication_strategy': 'Public disclosure via Washington '
                                        'State Office of the Attorney General'},
 'title': 'Humana, Inc. Data Breach (2022)',
 'type': 'Data Breach'}