Wellcare Health Insurance Company of Washington, Inc. experienced a data breach involving its vendor, Insightin Health, Inc., which was publicly reported in late 2025. Insightin Health identified suspicious activity on its file-transfer environment on September 23, 2025. Unauthorized access to the environment may have occurred between September 17, 2025, and September 23, 2025.
The exposed data included member names, dates of birth, non-unique health plan identifiers, contract numbers, Medicare Beneficiary Identifiers, and information associated with attributed providers. The California sample notice specifically stated that no Social Security numbers or financial information were involved for the individuals covered by that notice. The total number of affected individuals is not fully established, but a Washington-related report indicates 11,740 individuals were affected.
Insightin Health has stated that it found no evidence of identity theft or fraud and is offering complimentary credit monitoring services to affected individuals. The company also implemented additional safeguards following the incident. Details may emerge as further notifications are released.