Humana Inc.

Humana, Inc. experienced a data breach on **May 7, 2022**, due to unauthorized access to its systems. The incident exposed sensitive personal information of **639 Washington State residents**, including **names, Social Security numbers, and health insurance details**. The breach was formally reported to the **Washington State Office of the Attorney General** on **September 8, 2022**, indicating a delayed discovery or disclosure. The compromised data poses significant risks, such as identity theft, financial fraud, and potential misuse of health-related information. While the exact method of unauthorized access was not specified, the exposure of **Social Security numbers**—a high-value target for cybercriminals—heightens the severity. The breach underscores vulnerabilities in Humana’s data protection measures, raising concerns about compliance with regulatory standards like **HIPAA** and the potential for long-term reputational damage.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=13823

TPRM report: https://www.rankiteo.com/company/humana

"id": "hum033091825",
"linkid": "humana",
"type": "Breach",
"date": "5/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 639,
                        'industry': 'Healthcare',
                        'location': 'United States (Washington State residents '
                                    'affected)',
                        'name': 'Humana, Inc.',
                        'type': 'Health Insurance Provider'}],
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': 639,
                 'personally_identifiable_information': ['names',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Identifiable '
                                              'Information (PII)',
                                              'Protected Health Information '
                                              '(PHI)']},
 'date_detected': '2022-05-07',
 'date_publicly_disclosed': '2022-09-08',
 'description': 'The Washington State Office of the Attorney General reported '
                'that Humana, Inc. experienced a data breach due to '
                'unauthorized access on May 7, 2022. Approximately 639 '
                'residents were affected, and the compromised data included '
                'personal information such as names, Social Security numbers, '
                'and health insurance information.',
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 'health insurance information'],
            'identity_theft_risk': 'High (PII exposed)'},
 'references': [{'date_accessed': '2022-09-08',
                 'source': 'Washington State Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Washington State '
                                                       'Office of the Attorney '
                                                       'General'},
 'response': {'communication_strategy': 'Public disclosure via Washington '
                                        'State Office of the Attorney General'},
 'title': 'Humana, Inc. Data Breach (2022)',
 'type': 'Data Breach'}