Medicare CompareUSA Data Breach Affects 808 in WA

Published

September 19, 2025

Updated

September 19, 2025

Medicare CompareUSA Data Breach Affects 808 in WA

Aetna

Types of INFORMATION affected

Names
Social Security Numbers
Dates of Birth
Addresses
Government IDs
Medical Info
Financial Info

In November 2024, MedicareCompareUSA, a licensed insurance agency and call center that assists consumers in comparing and enrolling in Medicare plans, discovered suspicious activity related to certain internal email accounts. An investigation revealed that unauthorized access occurred between Nov. 5, 2024, and Nov. 21, 2024 and personal and protected health information was potentially exposed.

On March 18, 2025, MedicareCompareUSA notified Aetna/CVS that individuals related to the insurer were potentially involved in the data breach. Compromised information includes names, dates of birth, Social Security numbers, health insurance policy number, Medicare number, financial account number and medical information.

The breach is considered severe, due to the combination of exposed data, which increases the risk of identity theft and medical fraud for those impacted. The total number of affected individuals has not been released, but multiple health insurance organizations were impacted.

MCUSA disclosed the data breach to the Washington State Attorney General's office on Sept. 10, 2025, reporting 808 Washington residents. Impacted individuals involved with Aetna/CVS were notified by mail on Sept. 10, 2025.

Medicare CompareUSA and Aetna/CVS' response

In addition to required state and federal disclosures, MedicareCompareUSA is offering impacted individuals 12 free months of TransUnion Cyberscout credit monitoring and identity theft protection services.

If you receive a notice from MedicareCompareUSA or Aetna/CVS about this breach, you may want to:

Sign up for the free credit monitoring services offered.
Monitor your credit reports and financial accounts for any unusual activity.
Be alert for phishing emails or phone calls that may use your exposed information.
Consider placing a fraud alert or credit freeze with major credit bureaus.

For more information, affected individuals can contact the dedicated call center at 1-833-998-8824, Monday through Friday, 8 a.m. to 8 p.m. EST.

More information about the company can be found on the Medicare CompareUSA website.

Protect Your Data

A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.

This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.