Clover Health and AngMar Management Report Data Breaches Affecting Over 250,000 Individuals

Healthcare Firms Report Separate Breaches

Clover Health Investments and AngMar Management Services have disclosed separate data breaches, collectively impacting more than 250,000 individuals. Both companies have begun notifying affected parties about the incidents.

Clover Health Investments Incident Details

Jersey City-based Clover Health Investments reported a data breach in early July, stemming from a social engineering attack that compromised three non-managerial employee accounts. The breach led to the theft of personally identifiable information (PII) and protected health information (PHI), including names, dates of birth, insurance identifiers, and account identification numbers. The company informed the US Department of Health and Human Services (HHS) in mid-September that 138,677 people were affected.

AngMar Management Services Breach by Ransomware Group

Mansfield, Texas-based AngMar Management Services identified suspicious activity in mid-July, confirming in early September that hackers stole patient PII and PHI. The Interlock ransomware group claimed responsibility, adding AngMar to its leak site in August and stating over 700 gigabytes of data were stolen. Impacted information includes names, birth dates, Social Security numbers, diagnosis details, medical history, health insurance information, and prescription details. AngMar notified HHS on September 16 that 126,196 individuals were affected.

Impact on Individuals

The stolen data from both breaches includes sensitive personal and health information, which could expose affected individuals to risks such as identity theft and fraud. Both companies have been added to the HHS data breaches portal.