MisusePrivilege AbuseEmployee Data InvolvedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighResolved
HUMANA INC.
bd_847891d7144c0211 · schema v1 · pii pii-v1
Full breach record for HUMANA INC. →Humana Inc reported an insider wrongdoing incident affecting 63,307 individuals, including 88 in Maine. The breach occurred between October 12, 2020, and December 16, 2020, and was discovered on December 22, 2020. Social Security Numbers and names were compromised. Humana provided written notification and two years of Equifax credit monitoring services.
Maine clockDiscovered Dec 22, 2020 → Filed with AG Feb 23, 202163d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_8b264034a04f1ce4South Carolina State AGfiled 2021-02-23Verified
- bd_bc946186ec458638Washington State AGfiled 2021-02-23Verified
- bd_f467455aa0de3335HHS OCRfiled 2021-02-22(1d gap)Verified
- bd_3ed96e6747f3c116Montana State AGfiled 2021-02-25(2d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 13d gap
- bd_04839022a22e376eCalifornia State AGfiled 2021-03-08(13d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0d151e87-5544-4956-bb21-21086a259383.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 23, 2021
- Raw hash
- 6dac79d629a1f13ce37f033289c0e95e2f070921f1ab48872e99cd23f0083503
Reporting entity
- Name
- HUMANA INC.norm: humana
- Domain
- humana.com
Victim entity
- Name
- HUMANA INC.norm: humana
- Domain
- humana.com
Incident
- Discovered
- Dec 22, 2020
- Materiality determined
- —
- Notification sent
- Feb 25, 2021
- Affected individuals
- 63,307
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Internal
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- insider_action
Compliance
- Time to disclose
- 9 weeks(63 days from discovery to filing)
- Compliance flags
- ME AG >30d · 63dME resident >60d · 65d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 22, 2020→ Filed with AG: Feb 23, 202163d 30 days (soft) ME AG >30d Maine Discovered: Dec 22, 2020→ Notified: Feb 25, 202165d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.