Details of the 2026 Breach
- Cause: Unauthorized access to systems via a vendor's Oracle software vulnerability, discovered by Humana around September 29, 2025, and reported in March/April 2026.
- Impacted Data: Names, Humana IDs, Social Security numbers, medical billing/claims information, dates of service, and provider names.
- Scope: Reports suggest thousands were affected, with a specific filing for Texas citing roughly 2,104 residents.
- Response: Humana fixed the vulnerability and is offering 24 months of free credit monitoring and identity restoration services through Equifax, with an enrollment deadline of March 31, 2027.
Legal Action and Safety Measures - Lawsuits: A class action lawsuit was filed in Kentucky federal court in March 2026, alleging negligence and failure to protect patient information.
- Investigation: Legal firms (e.g., Federman & Sherwood https://www.federmanlaw.com/blog/humana-inc-data-breach-investigated-by-federman-sherwood/ ) are investigating the breach for potential legal action.
- Protection: Impacted individuals should receive a notification letter, monitor their credit reports, and consider placing fraud alerts.