HUMANA INC.
bd_8fc2d10420301176 · schema v1 · pii pii-v1
Full breach record for HUMANA INC. →43 incidents on fileThreat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Cl0p on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Company description · AI-generated by the aggregator, not the leak post
Humana Inc. is a leading US-based health insurance company, founded in 1961. Its coverage extends across the country, providing a range of insurance products and health and wellness services. These include medical, dental, and vision insurance, along with pharmacy services and health information technology solutions. Humana largely focuses on senior citizens, especially those enrolled in Medicare. The company is keen on fostering healthy habits and promoting preventive care efforts.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Nov 21, 2025
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- HHS OCRbd_037b41938bc1baac2026-02-28 · +98dVerified
- Indiana State AGbd_cba3ac2c85d342572026-03-16 · +114dCandidate
- Massachusetts State AGbd_d3125512bb3bdc782026-03-18 · +116dVerified
- Idaho State AGbd_52560034b40b0f2a2026-03-27 · +125dVerified
Show 2 more filings ↓Show fewer ↑up to 174d gap
- Illinois State AGbd_8ed01c44f5316bd22026-05-01 · +160dVerified
- HHS OCRbd_1b2396b69d25cc382026-05-15 · +174dVerified
Filing propagation · 6 filings · 5 states
View merged incident ↗Pattern: first filing Feb 28 (KY), last May 15 (KY) — a 76-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.