Care N' Care Insurance Company, a Medicare Advantage health plan provider, experienced a major data breach affected at least 32,452 individuals. The cybersecurity incident compromised both personally identifiable information (PII) and protected health information (PHI).
Exposed information included names, addresses, Social Security number, dates of birth, medical information, health insurance information and possibly other sensitive information. The combination of Social Security numbers, medical records and insurance details significantly increases the risk of identity theft and medical fraud for those affected.
The insurance company disclosed the breach to the Texas Attorney General's office on Oct. 7, 2025, reporting 32,452 Texas residents impacted.
In addition to state and federal disclosures, Care N' Care Insurance Company will notify affected individuals, as required by law. Notification usually occurs by mail and the company may also offer free credit monitoring services and other resources.
If you believe your personal information may have been compromised in this breach:
More information about the insurance company can be found on the Care N' Care Health Plan website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.