HCIactive Data Breach Exposes Sensitive Health Info

Healthcare Interactive Inc. (“HCIactive”), a company that provides insurance enrollment and benefits administration, experienced a major data breach. Around July 22, 2025, the company discovered suspicious activity within its computer network. An investigation revealed that a cybercriminal accessed and copied certain files between between July 8 and July 12, 2025.

HCIactive confirmed that the compromised files contained a large amount of both personally identifiable information (PII) and protected health information (PHI). Exposed information included names, addresses, dates of birth, Social Security numbers, phone numbers, email addresses, health insurance enrollment data including health plans, policies, insurance companies, member and group ID numbers, detailed medical records, and health insurance claims data including claim numbers, account numbers, explanation of benefits, and billing codes.

The total number of impacted individuals has not been released but is believed to be in the thousands. The extensive data compromised puts consumers at risk for identity theft and medical fraud.

Healthcare Interactive published a Notice of Data Privacy Event on its website in Sept. 2025.

HCIactive's response

Upon discovering the breach, HCIactive immediately secured its systems and launched an investigation. In addition to required state and federal disclosures, the company is notifying impacted individuals by mail and offering free credit monitoring services.

If you receive a data breach notice from Healthcare Interactive, you may want to:

• Sign up for the free credit monitoring services, offered by the company.
• Monitor your credit reports and financial accounts for any unusual activity.
• Be alert for phishing emails or phone calls that may use your exposed information.
• Consider placing a fraud alert or credit freeze with major credit bureaus.

Healthcare Interactive has also set up a dedicated response line for impacted indivudals at 1-833-855-4330, Monday through Friday, 9 a.m. to 9 p.m. Eastern Time

More information about HCIactive and its services can be found on the official HCIactive website.