Social EngineeringHealthcareHealthcarePhishingData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)Financial accountMediumContained

HUMANA INC.

bd_960ec039543338a6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 1, 2026

To disclose

—

Affected

Not disclosed

Linked

16 filings

Confidence

67%

Full breach record for HUMANA INC. →40 incidents on file

Pillsbury Winthrop Shaw Pitman LLP notified Humana patients in Nebraska of a security incident where sophisticated social engineering (phishing) targeted law firms, allowing an unauthorized actor to download documents from Humana's court case files. The breach exposed personal information including Social Security Numbers, credit/debit card numbers, and bank account numbers. Humana offered 24 months of free credit monitoring through Equifax. The incident date is June 1, 2026.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Jun 1, 2026

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 16 about the same incident.View merged incident

A leak claim by cl0p about this victim predates this filing by 191 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

New Hampshire State AGbd_340755f98cffa7042026-06-12 · +11dVerified by operator
Massachusetts State AGbd_60905841e9eb00ec2026-06-12 · +11dVerified by operator
Texas State AGbd_bb1cc89a278c171c2026-06-18 · +17dVerified by operator
HHS OCRbd_1b2396b69d25cc382026-05-15 · +17dVerified

Show 6 more filings ↓up to 75d gap

Illinois State AGbd_7c6eea2e34a068c22026-05-01 · +31dVerified
Illinois State AGbd_8ed01c44f5316bd22026-05-01 · +31dVerified
Idaho State AGbd_9d83c93a948631422026-04-30 · +32dVerified by operator
Texas State AGbd_22aeccc5358a90112026-04-24 · +38dVerified by operator
Idaho State AGbd_52560034b40b0f2a2026-03-27 · +66dVerified
Massachusetts State AGbd_d3125512bb3bdc782026-03-18 · +75dVerified

Showing first 10 of 15 linked disclosures.

Name: PILLSBURY WINTHROP SHAW PITTMAN LLP
norm: pillsbury winthrop shaw pittman

Name: HUMANA INC.
norm: humana
Domain: humana.com
Industry: healthcare
Industry: Healthcarellm

Discovered: —
Materiality determined: —
Notification sent: Jun 1, 2026
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Financial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Began an investigation with support from a third-party security firm
Made our computer systems safer
Told law enforcement about what happened
Giving you free credit monitoring and identity help for 24 months through Equifax
Changes made: Giving you free credit monitoring and identity help for 24 months through Equifax
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 7 states

View merged incident ↗

Massachusetts State AGMar 18 · first

Idaho State AG+9d

Texas State AG+37d

Idaho State AG+43d

Illinois State AG+44d

HHS OCR+58d

Nebraska State AG+75d · this page

New Hampshire State AG+86d

Massachusetts State AG+86d

Texas State AG+92d

Pattern: first filing Mar 18 (MA), last Jun 18 (TX) — a 92-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 15 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/592a09b7-748b-4030-834f-51929fc19813.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 1, 2026
Raw hash: 44a8e26b296f198f588a98d655e940f10e26c497160f57da6af452d696aec15c

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityPILLSBURY WINTHROP SHAW PITTMAN LLP

Victim entityHUMANA INC.

IncidentPhishing

Stated responseBegan an investigation with support from a third-party security firm

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov