● Covered by 1 source · 1 reportMedium impact
Clover Health Investments Reports Data Breach Affecting Customer Information
Clover Health Investments disclosed a data breach affecting customers' personal and health information due to a social engineering attack that compromised three employee accounts. The company initiated its response plan and engaged cybersecurity experts to handle the situation, though the full impact of the breach is still being investigated.
Key points
- Breach discovered on July 4 due to social engineering attack.
- Compromised accounts had access to personal and health information.
- No access to corporate financial or claims systems was reported.
Incident Overview
Clover Health Investments reported a data breach impacting the personal and health information of its customers. The breach was discovered on July 4 and resulted from a social engineering attack that affected three non-managerial health plan employee accounts.
Details of the Breach
The compromised accounts belonged to employees involved in member visit scheduling and broker-facing sales functions. These accounts had access to certain personally identifiable information (PII) and protected health information (PHI), but did not allow access to financial or claims systems, which could limit the breach's overall impact.
Response Actions
Upon discovery of the breach, Clover Health activated its response plan and engaged third-party cybersecurity experts for containment and investigation of the incident. The company believes it has successfully evicted the attackers but is still working to determine the full nature, scope, and extent of the breach.
Ongoing Investigations
Clover Health has not provided details about the identity of the threat actor, and no ransomware or extortion group has claimed responsibility for the attack. SecurityWeek has reached out to the company for further information regarding the incident.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
Clover Health Investments disclosed a data breach affecting customers' personal and health information due to a social engineering attack that compromised three employee accounts. The company initiated its response plan and engaged cybersecurity experts to handle the situation, though the full impact of the breach is still being investigated.