MisusePrivilege AbuseIDENTITY_BASICIDENTITY_GOVERNMENTCriticalResolved
UNITEDHEALTHCARE INSURANCE COMPANY
bd_2e384b1bc09f780d · schema v1 · pii pii-v1
Full breach record for UNITEDHEALTHCARE INSURANCE COMPANY →UnitedHealthcare reported an insider wrongdoing incident that occurred and was discovered on January 11, 2021. The breach affected 3,253,822 individuals, compromising their names and Social Security Numbers. UnitedHealthcare provided written notification to affected individuals starting May 28, 2021, and offered 12 months of credit monitoring services.
Maine clockDiscovered Jan 11, 2021 → Filed with AG Jul 2, 2021172d ✗ ME AG >90d25 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3,253,822 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/db9e3502-fa52-4e4a-8d20-c65aad30ec88.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 2, 2021
- Raw hash
- e2346d5d98bc89a787402607935883d97bd73e05cdbf537fdd36ad1c9c981e3b
Reporting entity
- Name
- UNITEDHEALTHCARE INSURANCE COMPANYnorm: unitedhealthcare insurance
- Domain
- uhc.com
Victim entity
- Name
- UNITEDHEALTHCARE INSURANCE COMPANYnorm: unitedhealthcare insurance
- Domain
- uhc.com
Incident
- Discovered
- Jan 11, 2021
- Materiality determined
- —
- Notification sent
- May 28, 2021
- Affected individuals
- 3,253,822
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Insider
- Threat actor
- Internal
Compliance
- Time to disclose
- 25 weeks(172 days from discovery to filing)
- Compliance flags
- ME AG >90d · 172dME resident >60d · 137d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 11, 2021→ Filed with AG: Jul 2, 2021172d 90 days ME AG >90d Maine Discovered: Jan 11, 2021→ Notified: May 28, 2021137d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.