Aetna Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Medicare CompareUSA filing on behalf of Aetna (CVS) data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Medicare CompareUSA filing on behalf of Aetna (CVS)
Medicare CompareUSA is a private insurance agency and call center that works with hospitals, physicians and Medicare beneficiaries to help individuals compare and enroll in Medicare insurance plans. The agency often acts as an authorized agent for major insurers, including Aetna, which is now part of CVS Health.
Founded in 2011, Medicare CompareUSA operates nationwide and operates as an independent broker, handling administrative functions such as enrollment assistance and plan comparisons related to Aetna/CVS plans.
What happened?
In November 2024, Medicare CompareUSA discovered suspicious activity involving certain email accounts. An investigation revealed that an unauthorized actor gained access to the company's internal email network between Nov. 5, 2024, and Nov. 21, 2024.
Aetna/CVS was notified on March 18, 2025 that certain customers may have been compromised. The data breach compromised personal, financial and protected health information. The total number of impacted individuals has not been released, but involves multiple insurance companies.
Information Exposed
- Name
- Social Security number
- Date of birth
- Health insurance policy number
- Medical information
- Medicare number
- Financial account number
Medicare CompareUSA began notifying Aetna/CVS by mail on Sept. 10, 2025. The cybersecurity incident was also disclosed to the Washington State Attorney General's office on the same day.
Your Rights and Next Steps
If you received a notice about this data breach, or suspect your personal data may have been involved, you have important rights and options. You may be entitled to seek compensation for any harm or inconvenience caused by this cybersecurity incident.
- Credit monitoring services: Enroll in the 12 months of free TransUnion Cyberscount credit monitoring and identity theft protection services, offered by Medicare CompareUSA.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
Lawyers are ready to help affected individuals understand their rights and pursue compensation if their personal information was exposed due to this breach.
You May Be Entitled to Compensation
If you are an Aetna/CVS customer and were affected by the Medicare CompareUSA data breach, you may have the right to compensation for the exposure of your sensitive information. This could include reimbursement for out-of-pocket expenses, time spent addressing the breach, or payment for emotional distress.
Lawyers are investigating this incident and can help determine if you qualify to join a class action lawsuit. Complete the form below to get started.