UNITEDHEALTHCARE INSURANCE COMPANY

UnitedHealthcare reported to HHS on 2025-08-12 a Unauthorized Access/Disclosure affecting 3215 individuals. Breached information located on Paper/Films.

UnitedHealthcare reported a data breach to the Indiana Attorney General. The breach occurred on 2024-02-14 and was reported on 2024-08-07. 2 Indiana residents were affected. 1,178 individuals affected in total.

UnitedHealthcare Insurance Company reported to HHS on 2024-05-01 an Unauthorized Access/Disclosure affecting 16,665 individuals. An employee of the covered entity's business associate mailed PHI of 16,665 individuals to the wrong recipients. Breached information was located in Paper/Films. The CE notified HHS, affected individuals, and media. The CE and BA implemented additional administrative, technical, and security safeguards, and staff were retrained.

Welltok, Inc. notified UnitedHealthcare members in Delaware of a data breach involving the exploitation of a zero-day vulnerability in Progress Software's MOVEit Transfer tool. The incident occurred between May 30-31, 2023, resulting in the exfiltration of member data including names, addresses, Member IDs, DOBs, and Medicaid IDs. Welltok engaged third-party forensic specialists and is offering 24 months of credit monitoring via Experian.

UnitedHealthcare reported a data breach to the Montana Attorney General. The breach was reported on 2023-12-08. The breach occurred from 4/11/2023 to 4/12/2023. 3 Montana residents were affected.

UnitedHealthcare discovered unauthorized access to its broker portal on December 29, 2022. The incident occurred between December 1, 2022, and January 25, 2023. An unauthorized party accessed member health information, including names, member IDs, and plan details, while attempting to divert funds. Social Security numbers and financial account information were not involved. UnitedHealthcare disabled affected accounts and implemented additional security controls.

UnitedHealthcare reported a data breach to the Oregon Attorney General. The breach was reported on 2023-08-31. The breach occurred during 1/1/0001. The breach was discovered on 12/29/2022. 315,915 individuals were affected. Notice was sent on 1/1/0001.

UnitedHealthcare reported a data breach to the Oregon Attorney General. The breach was reported on 2023-06-09. The breach occurred during 2/19/2023 - 2/20/2023. The breach was discovered on 2/20/2023. 16,844 individuals were affected. Notice was sent on 6/9/2023.

UnitedHealthcare reported a data breach to the Montana Attorney General. The breach was reported on 2023-04-28. The breach occurred from 2/19/2023 to 2/25/2023. 14 Montana residents were affected.

UnitedHealthcare (UHC) reported a data breach affecting 32,064 individuals, including 116 Maine residents. The breach, described as an external system breach (hacking), occurred on May 7, 2022, and was discovered on August 4, 2022. The compromised information includes names and Social Security numbers. UHC notified affected individuals on October 7, 2022, and offered a two-year membership to Experian IdentityWorks for identity theft protection.

UnitedHealthcare reported an internal system breach that occurred on August 6, 2020, and was discovered on July 1, 2021. The breach affected 3 Maine residents. In response, the company offered two years of identity theft protection services.

UnitedHealthcare reported a data breach to the Montana Attorney General. The breach was reported on 2021-07-14. The breach occurred from 5/24/2021 to 6/3/2021. 1 Montana residents were affected.

UnitedHealthcare reported an insider wrongdoing incident that occurred and was discovered on January 11, 2021. The breach affected 3,253,822 individuals, compromising their names and Social Security Numbers. UnitedHealthcare provided written notification to affected individuals starting May 28, 2021, and offered 12 months of credit monitoring services.

UnitedHealthcare reported a data breach to the Montana Attorney General. The breach was reported on 2021-05-11. The breach occurred from 3/7/2021 to 3/15/2021. 8 Montana residents were affected.

UnitedHealthcare reported a data breach to the Montana Attorney General. The breach was reported on 2020-02-03. The breach occurred from 7/30/2019 to 11/13/2019. 1 Montana residents were affected.

UnitedHealthcare reported a data breach to the Montana Attorney General. The breach was reported on 2019-10-16. The breach occurred on 7/26/2019. 1 Montana residents were affected.

UnitedHealthcare reported a data breach to the Montana Attorney General. The breach was reported on 2019-05-21. The breach occurred from 3/21/2019 to 3/28/2019. 5 Montana residents were affected.

California AG SB24 filing regarding a breach at RR Donnelley, a vendor for UnitedHealthcare. Between Sept-Nov 2012, an unencrypted desktop computer containing names, addresses, and SSNs of UnitedHealthcare members was stolen from RR Donnelley. UnitedHealthcare notified affected individuals in Jan 2013, offering one year of LifeLock identity theft protection. The computer was unencrypted and law enforcement was notified.

UnitedHealthcare Insurance Company (MN) reported to HHS OCR on 2010-07-17 a breach classified as 'Other' affecting 1,097 individuals. Breached information was located on Paper/Films. A business associate was present. No further description was provided.