Clover Health Data Breach Exposes Sensitive PII and PHI

Clover Health, a healthcare technology and insurance company that provides Medicare Advantage plans to seniors, disclosed a data breach that involved the exposure of sensitive consumer information.

The breach was disclosed to the U.S. Securities and Exchange Commission on July 4, 2026. The total number of individuals affected in the United States has not been publicly reported.

Details about how this breach occurred have not been shared in publicly available disclosures. The method of attack, the specific dates of the incident and how the company discovered the breach have not been described in public filings.

The breach involved the exposure of both personally identifiable information and protected health information. The specific data elements within those two categories that were compromised in this breach have not been publicly confirmed.

Personally identifiable information, commonly called PII, is a broad category of data that can be used to identify a specific individual. It can include details such as names, mailing addresses, email addresses, dates of birth, Social Security numbers and phone numbers.

Protected health information, or PHI, refers to health-related data protected under federal privacy laws such as HIPAA. PHI can include medical records, diagnoses, treatment histories, prescription information and health insurance details.

Clover Health's response to the breach

Clover Health has issued a notification to consumers affected by the data breach. However, the specific contents of that notification, including whether the company is offering credit monitoring, identity theft protection or other protective services, remain unavailable to the public.

It's important for individuals who were impacted to remain vigilant and secure their data. Watch for direct communications from Clover Health and review any correspondence carefully for information about what specific data was involved and any recommended next steps.