Over 250,000 people have had their sensitive information compromised in two separate data breaches at New Jersey-based Clover Health Investments and Texas-based AngMar Management Services. The affected individuals include patients and insurance holders whose personal identifiable information (PII) and protected health information (PHI) were stolen by hackers.
The breach at Clover Health Investments occurred in early July, when attackers used social engineering tactics to compromise three non-managerial employee accounts. This allowed them to access PII and PHI, including names, dates of birth, insurance identifiers, and account identification numbers. The company initially reported the incident to the US Department of Health and Human Services (HHS) in mid-September, stating that 138,677 people were affected.
Meanwhile, AngMar Management Services, a Texas-based provider of business operations and administration services for home health and hospice care providers, identified suspicious activity on its systems in mid-July. In early September, the company confirmed that hackers had stolen patient PII and PHI, including names, birth dates, Social Security numbers, diagnosis details, medical history data, health insurance information, patient IDs, provider names, prescription details, and dates of service.
The Interlock ransomware group claimed to have stolen over 700 gigabytes of data from AngMar Management Services in August and added the company to its Tor-based leak site. The company notified HHS on September 16 that 126,196 individuals were affected.
What’s particularly concerning about these breaches is the potential for identity theft, medical fraud, and other malicious activities. With sensitive information like Social Security numbers and health insurance details compromised, victims may be at risk of financial loss, reputation damage, and even physical harm.
The fact that both companies took several weeks to report the incidents highlights the need for more robust incident response strategies in the healthcare sector. The US Department of Health and Human Services requires organizations to report data breaches within 60 days of discovery. However, this timeline can be challenging to meet, especially when dealing with complex investigations and notifications.
As a result, it’s essential for individuals whose information was compromised to remain vigilant and monitor their accounts closely for suspicious activity. They should also take steps to protect themselves by freezing their credit reports, using two-factor authentication, and keeping software up-to-date on all devices. Additionally, healthcare organizations must prioritize data security and invest in robust incident response plans to minimize the risk of such breaches occurring in the future.
In light of these incidents, it’s crucial for individuals to be aware of the signs of a potential breach, including unsolicited phone calls or emails requesting personal information, unfamiliar charges on their credit cards, or notifications from creditors about account activity. By being proactive and informed, we can all play a role in preventing and mitigating the impact of data breaches like these.
Source: SecurityWeek — 2026-10-05