Continental Casualty
Disclosed Jan 28, 20268 months ago6,086 affectedConfirmed
The covered entity (CE), Continental Casualty Company, reported that it was notified by its business associate (BA) that a subcontractor of the BA’s subcontractor experienced a breach of its network that affected the protected health information (PHI) of 6,086 individuals. The PHI involved included clinical, demographic, and financial information. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE and BA implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect its PHI.
What is known
| People affected | 6,086 (as reported to HHS) |
|---|---|
| Disclosed | Jan 28, 2026 |
| Discovered | Jan 13, 2025 |
| Happened | Oct 21, 2024 |
| Attack | Hacking |
| Data exposed | Social Security numbers, Health, Addresses, Names |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Texas Attorney General data security breach report BR-0004808: Continental Casualtyoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General: 2026-01-28 Continental Casualty Company and its affiliates Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Continental Casualty (Health Plan, IL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Vermont AGresidents of VT | Jan 28 | |
| Texas AGresidents of TX | Feb 2 | 381 |
| HHS archivetotal | Mar 23 | 6,086 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 5875 to 6086 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Continental Casualty Company, reported that it was notified by its business associate (BA) that a subcontractor of the BA’s subcontractor experienced a breach of its network that affected the protected health inform · backfill source
- 2026-09-25 · disclosed: 2026-02-02 to 2026-01-28 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Texas AG), confirmed by Texas AG. Record counts are as reported. Not legal advice.