UNITEDHEALTHCARE INSURANCE COMPANY
bd_729c8b519441f239 · schema v1 · pii pii-v1
All records for UNITEDHEALTHCARE INSURANCE COMPANY →33 incidents on fileAccount takeover notice
UNITEDHEALTHCARE INSURANCE COMPANY notified members of unauthorized access to their accounts. The filing says: “Through our investigation we determined that the application was the target of a credential stuffing attack.”
UnitedHealthcare notified Montana residents of a credential stuffing attack on its mobile application occurring Feb 19-25, 2023, discovered Feb 22, 2023. Affected data included names, DOB, addresses, and PHI (member IDs, claims). UHC locked accounts, reset passwords, and offered 2 years of LifeLock identity theft protection.
J jump to incidentP pin to compareR raw source
Incident timeline
Feb 19, 2023
Begins
Feb 22, 2023
Discovered
Apr 28, 2023
Filed
vs. sector median
on median
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- Oregon State AGbd_3c5f9789fd8ef4662023-06-09 · +42dVerified
Filing propagation · 2 filings · 2 states
View merged incident ↗Pattern: first filing Apr 28 (MT), last Jun 9 (OR) — a 42-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.