MedicareCompareUSA, a business associate that works with health insurers like Humana, experienced a data breach on November 5, 2024. This incident involved the exposure of personal health information and financial data belonging to members of its clients, including Humana. Notifications to affected individuals began in May 2025.
The compromised data types include names, dates of birth, Social Security numbers, driver’s license/state ID numbers, health insurance information, Medicare information, financial account information, and medical/claims-related information. A total of 5,782 individuals were reported to HHS OCR. Specifically, 822 Humana members in Washington were notified, though another report indicates 922 Washington residents were affected across the entire MedicareCompareUSA incident.
Further details regarding the full extent of affected states beyond Washington for Humana members, and the complete scope of all insurers impacted by the MedicareCompareUSA incident, remain unclear. Additional information may emerge as regulatory processes continue and notices are fully distributed.