Healthcare Interactive, Inc. (HCIactive), a Maryland-based technology provider, announced a data breach after detecting suspicious network activity on July 22, 2025. An unauthorized actor copied files from their systems between July 8 and July 12, 2025. This incident was officially reported to the U.S. Department of Health and Human Services (HHS) in September 2025.
The breach compromised various types of personal and health information, including names, addresses, phone numbers, email addresses, dates of birth, Social Security numbers (SSNs), health insurance plan/policy numbers, provider names, member/group IDs, health insurance claim numbers, account numbers, explanation of benefits, and billing codes. Medical data such as diagnoses, treatment information, prescriptions, lab results, medical images, care information, doctors’ names, and medical record numbers were also exposed. Notifications were sent nationally, with confirmed high impact in Maine, affecting 87,565 residents, and Oregon, affecting 3,056,950 residents. Free credit monitoring was offered to affected individuals. The total number of affected individuals is over 3 million.
Details about data breaches can emerge after initial reports, and consumer notifications may be delayed.