HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
HUMANA INC.
bd_5e0ab630db4c8570 · schema v1 · pii pii-v1
Full breach record for HUMANA INC. →Humana, a healthcare entity based in Louisville, KY, reported an external system breach (hacking) occurring on May 7, 2022, discovered on July 26, 2022. The incident affected 22,767 individuals, including 23 Maine residents. Acquired information included names and Social Security Numbers. Humana notified affected individuals in writing on June 8, 2022, and offered 2 years of identity theft protection services through Experian.
Maine clockDiscovered Jul 26, 2022 → Filed with AG Sep 21, 202257d ⏱ ME AG >30d8 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed22,767 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cc555adc-686e-42db-895e-34999c9e1c2b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 21, 2022
- Raw hash
- 066026dee20798dcaf73e4655103f5ea8e62a29cfa079e19999133d4b14b3740
Reporting entity
- Name
- HUMANA INC.norm: humana
- Domain
- humana.com
Victim entity
- Name
- HUMANA INC.norm: humana
- Domain
- humana.com
Incident
- Discovered
- Jul 26, 2022
- Materiality determined
- —
- Notification sent
- Jun 8, 2022
- Affected individuals
- 22,767
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- ME AG >30d · 57d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 26, 2022→ Filed with AG: Sep 21, 202257d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.