WellCare Health Plans, Inc.
ent_019e0be9c0191025964583a9a1bf055a
Disclosures
7
State AG · HHS OCR · 2 jurisdictions
Multi-filing incidents
—
no multi-filing incident in sample
Max affected reported
50,440
nationwide · HHS OCR FL
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- WellCare Health Plans, Inc.
- Normalized
- wellcare health plans— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 529900JCT1MMTWHZ5P23
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
- Corporate parent
- CENTENE CORPORATION— per SEC Exhibit 21 filing
Disclosure history (7)newest first
- Nebraska State AGas victim2025-09-10
MedicareCompareUSA (MCUSA) reported a phishing incident affecting WellCare/Centene policyholders. Unauthorized access occurred between Nov 5-21, 2024, exposing names, DOB, Medicare numbers, and financial account data. One Nebraska resident was notified on Sep 10, 2025. MCUSA provided credit monitoring via Transunion/Cyberscout and notified HHS and credit bureaus.
- FLORIDAHHS OCRas victim2020-07-16
WellCare Health Plans reported to HHS on 2020-07-16 a Unauthorized Access/Disclosure affecting 50440 individuals. Breached information located on Paper/Films. Multiple employees mailed PHI including names and medication information to wrong recipients.
- FLORIDAHHS OCRas victim2020-06-30
WellCare Health Plans, Inc. (FL, Health Plan) reported to HHS on 2020-06-30 an Unauthorized Access/Disclosure affecting 2,794 individuals. The covered entity's business associate inadvertently released documents containing PHI — including names and diagnoses — to a court. The BA provided additional HIPAA training; the CE notified affected individuals and provided complimentary credit monitoring. OCR obtained assurances of corrective actions. Breached information located on: Other.
- FLORIDAHHS OCRas victim2018-09-14
WellCare Health Plans, Inc. (FL) reported to HHS OCR on 2018-09-14 an Unauthorized Access/Disclosure affecting 26,942 individuals via Paper/Films. Between January 20 and June 20, 2018, appointment reminder letters were mistakenly mailed to wrong members, exposing name, age, Medicaid number, healthcare providers, and appointment reason. The CE terminated one staff member, retrained another, updated policies, and created an automated mailing procedure following OCR investigation.
- FLORIDAHHS OCRas victim2018-06-13
WellCare Health Plans, Inc. reported to HHS on 2018-06-13 an Unauthorized Access/Disclosure affecting 1101 individuals. An employee of business associate Advanced Medical Reviews (AMR) used stolen physician credentials to access PHI, including demographic and clinical information. WellCare notified HHS, individuals, and regulators, provided credit monitoring, and implemented corrective actions.
- FLORIDAHHS OCRas victim2017-08-11
WellCare Health Plans, Inc. reported to HHS on 2017-08-11 a Unauthorized Access/Disclosure affecting 1214 individuals. Breached information located on Paper/Films. A business associate, O’Neil Printing, Inc., accidentally sent mislabeled envelopes containing insurance membership identification cards to incorrect addresses between July 13 and July 17, 2017. The mistake was discovered on July 20, 2017.
- FLORIDAHHS OCRas victim2017-01-27
WellCare Health Plans, Inc. reported to HHS on 2017-01-27 a Hacking/IT Incident affecting 24809 individuals. Breached information located on Network Server. The incident involved a data security event at Summit Reinsurance, a reinsurer for WellCare. OCR reviewed the matter and determined no violation of HIPAA laws occurred.