Insurance giant Humana reveals second data breach in as many months

American insurance giant Humana suffered a major data breach that compromised the personal information of customers residing in Texas and five other US states.

 

The insurance giant revealed in a data security incident notice filed with the Massachusetts Attorney General that suffered the data breach incident in September which affected the personal information of customers.

 

According to the Austin American Statesman, the data security incident impacted customers in Texas, Florida, Georgia, North Carolina, Ohio and Virginia. 

 

The data breach occurred due to a sophisticated supply chain attack that involved malicious actors compromising a Oracle software application to gain access to Humana’s systems. Humana said that upon discovering the breach, it quickly severed external access to its systems and notified law enforcement agencies.

 

The insurance giant said the cyber security incident possibly compromised customers’ "names, Humana Identification or other patient account numbers, Social Security number, medical billing / claims information, dates of service, provider names and other health insurance information.” 

 

"As soon as Humana learned about the problem, the company worked with Oracle to address the vulnerability, and also notified law enforcement," the company said, adding that it is providing complimentary credit monitoring and identity restoration services through Equifax to all affected patients for a period of 24 months.
  
The insurance giant provides curated insurance services to tens of millions of Americans through a number of distinct segments. The Medicare Advantage segment, focussed on elders and those suffering with disabilities, serves over 6.2 million people; the TriCARE program, focussed on military personnel, their families and veterans, serves about 6 million members; and the CenterWell segment provides primary care to over 300,000 seniors.

 

News of the data breach arrives not long after the insurance giant, the fourth largest in the US, was slapped with a class action lawsuit stemming from another major data breach incident reported in March 2026. The class action lawsuit alleged that Humana and its subsidiary CenterWell were negligent in securing customer information which led to the breach of sensitive personal information of 4,618 individuals in Texas.