HUMANA INC.
bd_d3125512bb3bdc78 · schema v1 · pii pii-v1
Full breach record for HUMANA INC. →43 incidents on fileHumana Inc. disclosed unauthorized access to internal systems in August 2025, discovered on September 29, 2025. The incident was caused by a vendor's software vulnerability involving Oracle. Affected data included names, Humana ID numbers, Social Security numbers, and medical billing/claims information. Humana worked with Oracle to address the vulnerability, notified law enforcement, and is providing 24 months of credit monitoring and identity restoration services through Equifax.
J jump to incidentP pin to compareR raw source
Incident timeline
Aug 1, 2025
Begins
Sep 29, 2025
Discovered
Mar 18, 2026
Filed
vs. sector median
+15 wks slower
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Sitecl0pbd_8fc2d104203011762025-11-21 · +116dVerified by operator
Regulatory filings (5) · sorted by filing gap
- Indiana State AGbd_cba3ac2c85d342572026-03-16 · +2dCandidate
- Idaho State AGbd_52560034b40b0f2a2026-03-27 · +9dVerified
- HHS OCRbd_037b41938bc1baac2026-02-28 · +18dVerified
- Illinois State AGbd_8ed01c44f5316bd22026-05-01 · +44dVerified
Show 1 more filing ↓Show fewer ↑up to 58d gap
- HHS OCRbd_1b2396b69d25cc382026-05-15 · +58dVerified
Filing propagation · 6 filings · 5 states
View merged incident ↗Pattern: first filing Feb 28 (KY), last May 15 (KY) — a 76-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.