Social EngineeringHealthcareHealthcarePhishingData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)Financial accountMediumContained

HUMANA INC.

bd_960ec039543338a6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 1, 2026

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

67%

Full breach record for HUMANA INC. →43 incidents on file

Pillsbury Winthrop Shaw Pitman LLP notified Humana patients in Nebraska of a security incident where sophisticated social engineering (phishing) targeted law firms, allowing an unauthorized actor to download documents from Humana's court case files. The breach exposed personal information including Social Security Numbers, credit/debit card numbers, and bank account numbers. Humana offered 24 months of free credit monitoring through Equifax. The incident date is June 1, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jun 1, 2026

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

New Hampshire State AGbd_340755f98cffa7042026-06-12 · +11dVerified by operator
Massachusetts State AGbd_60905841e9eb00ec2026-06-12 · +11dVerified by operator
Illinois State AGbd_7c6eea2e34a068c22026-05-01 · +31dVerified by operator
Idaho State AGbd_9d83c93a948631422026-04-30 · +32dVerified by operator

Name: PILLSBURY WINTHROP SHAW PITTMAN LLP
norm: pillsbury winthrop shaw pittman

Name: HUMANA INC.
norm: humana
Domain: humana.com
Industry: healthcare
Industry: Healthcarellm

Discovered: —
Materiality determined: —
Notification sent: Jun 1, 2026
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Financial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Began an investigation with support from a third-party security firm
Made our computer systems safer
Told law enforcement about what happened
Giving you free credit monitoring and identity help for 24 months through Equifax
Changes made: Giving you free credit monitoring and identity help for 24 months through Equifax
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Idaho State AGApr 30 · first

Illinois State AG+1d

Nebraska State AG+32d · this page

New Hampshire State AG+43d

Massachusetts State AG+43d

Pattern: first filing Apr 30 (ID), last Jun 12 (MA) — a 43-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/592a09b7-748b-4030-834f-51929fc19813.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 1, 2026
Raw hash: 44a8e26b296f198f588a98d655e940f10e26c497160f57da6af452d696aec15c

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityPILLSBURY WINTHROP SHAW PITTMAN LLP

Victim entityHUMANA INC.

IncidentPhishing

Stated responseBegan an investigation with support from a third-party security firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov