Clover Health
Disclosed Sep 22, 20233 years ago2,834 affectedConfirmed
Clover Health, the covered entity (CE), reported that an employee of its business associate (BA) posted the protected health information (PHI) of 2,834 individuals to the Internet. The PHI involved included names, birthdates, addresses, phone numbers, and other treatment information. Clover Health notified HHS, affected individuals, and the media. In its mitigation efforts, the CE and BA sanctioned the responsible employee and strengthened its administrative and technical safeguards.
What is known
| People affected | 2,834 (as reported to HHS) |
|---|---|
| Disclosed | Sep 22, 2023 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Clover Health (Health Plan, NJ)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Sep 22, 2023 | 2,834 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.