HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
MN Health Insurance Network
bd_db7069bf6cc8e1ad · schema v1 · pii pii-v1
Full breach record for MN Health Insurance Network →Minnesota Health Insurance Network notified Massachusetts residents of unauthorized network access occurring March 16-17, 2026. The incident involved the exfiltration of full names and government identifiers (SSN, driver's license). The company engaged outside cybersecurity professionals and offered complimentary Equifax Credit Watch Gold membership to affected individuals. Investigation was concluded on June 4, 2026.
Massachusetts clock✗ MA AG >90d15 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
A leak claim by akira about this victim predates this filing by 83 days.View originating leak claim
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-1183-minnesota-health-insurance-network/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 1, 2026
- Raw hash
- bc4ac63d53442378d31b6fa4419a93eb11b12409d4a63e76713638092a66e294
Reporting entity
- Name
- MN Health Insurance Networknorm: mn health insurance network
- Domain
- mnhealthnetwork.com
Victim entity
- Name
- MN Health Insurance Networknorm: mn health insurance network
- Domain
- mnhealthnetwork.com
Incident
- Discovered
- Mar 16, 2026
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 weeks(107 days from discovery to filing)
- Compliance flags
- MA AG >90dLeak >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.